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DISCLAIMER 


Although every effort has been made to make this USER'S 
MANUAL technically accurate, ZAX Corporation assumes no 
responsibility for any errors, omissions, inconsistencies 
or misprints within this document. ZAX Corporation also 
assumes no responsibility for any incidental or consequen- 
tial damages arising out of the use or inability to use 
this equipment. Further, ZAX Corporation reserves the 
right to revise this document at any time, by means of 
additions or deletions or any other reconstruction, with- 
out obligation to notify any person or organization of 
such revisions or changes, unless otherwise stated - 


COPYRIGHT 

This manual and the software described in it are copy- 
righted with all rights ''reserved. No part of this man- 
ual or the programs may be copied, in whole or part, 
without written permisssion frbm ZAX Corporation, ex- 
cept in the normal use of the software or to make a 
backup copy for use with the same system. This excep- 
tion does not allow copies to be made for other persons. 


PRECAUTIONS 

Do not connect this equipment to any external device or 
attach the target processor probe before first reading 
the information in Section 1.7. (See "How To Operate 
Your ICD-178.") 

Failure to correctly hookup this equipment may result 
in severe damage to the ICD-178 and the target system. 



USERS MANUAL 


INTRODUCTION 


This USER'S MANUAL contains information on the ZAX 
ICD-178 for 8048, IN-CIRCUIT EMULATOR. This manual is 
designed to allow you to install, configure and run 
the ICD-178 in a very short time. This manual will 
instruct you in; identifying components and controls 
of the emulator, connecting the various accessories 
(probes, power cable, cooling fan), connecting the 
system to a host computer and performing emulation by 
using the debugger commands. 


HOW TO USE THIS MANUAL 


This USER'S MANUAL is divided into three main sec- 
tions. SECTION I is entitled ICD DESCRIPTION and 
OPERATION. This section begins with a description of 
the ICD-178 and includes both general and emulation 
specifications of the unit. This section also de- 
scribes the controls and components of the ICD-178 
and shows how to connect the system to a host computer 
and run the emulator. If you are using the ZAX ICD-178 
emulator for the first time, read this section first 
to become familiar with the various functions and to 
learn the correct procedure for installation and 
operation. 

SECTION II contains information on the debugger com- 
mands and is entitled COMMAND REFERENCE GUIDE. It is 
the section that you will be using the most, and 
therefore is presented in the greatest detail. This 
section will show you the command names, functions, 
formats and input parameters, a directory of debugger 
operations, and a detailed analysis of each command 
with accompanying examples. In addition to this sec- 
tion, a separate COMMAND REFERENCE GUIDE may be found 
at the front of this manual. This compact, fold-out 
guide can be used when you become familiar with the 
command input parameters. 

SECTION III contains specific technical information 
on the emulator and is entitled TECHNICAL REFERENCES. 
The information in this section will give you a de- 
tailed analysis on important emulator features and 
functions . 
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SECTION I 

ICD DESCRIPTION and OPERATION 

1.1 PARTS LIST 


These items are included with your ICD-178; 


ITEM QTY 

External Break Cable 1 

Event Trigger Cable 1 

Power Cord 'I 

Fan Unit 1 

SCI Dip Plug 1 set 

ROM Select Module [ i80xx/i80xxHl 4 

[i87xx/i87xxH] 

In-circuit Target Processor Probe 1 

User’s Manual 1 


NOTE: See ’’Controls and Component Functions” (Section 1.5) 
to identify these items and their functions. 



1.2 ICD DESCRIPTION 


The ZAX ICD-178 IN-CIRCUIT EMULATOR functions as a stand- 
alone device for developing and maintaining hardware and 
software of 8048 microprocessors. The ICD-178 is designed 
for simple operation to allow you to begin debugging tasks 
quickly and effectively. The ICD-178 comes standard with 
4K bytes of emulation memory, a 2K deep x 32 bits wide 
real-time trace buffer, a built-in EPROM programmer and 
32 powerful debugger commands. 
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1.3 SPECIFICATIONS (General) 


Dimensions 


Probe Length 
Weight 

Power Requirements 
Processors 


Clock speed (maximum) 

Memory Size 

Memory Mapping 

Real Time Trace Buffer 

System Commands 

Breakpoints 


Communication Ports 
Baud Rates 


Operating Temperature 
Storage Temperature 
Humidity 


300mm (11. Sin) wide 
210mm (8.2in) deep 
80mm (4.2in) high 
510mm (20in) long 
3.3kg (7.31b) 

1 1 5VAC/230VAC,50/60Hz 

18048 18039 

18049 18040 

18050 18748 

18035 18749 

1 1MHz 

4K Bytes static RAM 

256 Bytes 
2K X 32 bits 

32 

3 (hardware), 8 (software) 

1 (external probe) 

2 channels RS 232C 

14 usable - to 19,200bps 
(factory set at 9,600bps) 

0®C to 45°C 
-10°C to 55^C 
30% to 85% 
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1.4 SPECIFICATIONS (Emulation) 


Memory Area 

Program memory 

User memory 
Mapping 

I/O Port 

Breakpoints 

Hardware Break 
A,B,C Breaks 


The entire area of the program memory 
(4K-bytes) is available. This memory is 
composed of high-speed static RAM. 

The entire area of the 4K Byte memory 
space is available to the target system. 

Both the program and user memory can 
be mapped in 256 Byte units. Four types 
of mapping modes are available; 

User Memory 

Emulation Read/Write Memory 
Emulation Read Only Memory 
No Memory (Illegal Access) 

Ports 1 through 7 and the BUS port are all 
available to the target system. 

3 Hardware, 8 Software and External 
trigger break. 

A,B,C and Event Trigger (enable/disable) 
Address 12 bit. Each bit may be specified 
0,1 or "don't care." 

Status: 

Opcode fetch 

External Data Memory access 
External Data Memory read 
External Data Memory write 
Port access 
Port read 
Port write 

Arm: 

Break occurs only at the breakpoint 
after an event trigger is generated. 


1-: 


1-3 


ICD-178 for 8048 USER’S MANUAL 



1.4 SPECIFICATIONS (Emulation) 


Event Trigger 
break 


Event Trigger 
output 


Address 12 bit. Each bit may be specified 
0,1 or “don't care.** 

Status : 

Opcode fetch 
Memory access 
Memory read 
Memory write 
Port access 
Port read 
Port write 

Data: 

8 bit. Each bit may be specified 0,1 or 
“don't care." 


One channel of the event trigger output 
can output to a logic analyzer, oscil- 
loscope, etc. If a specified event con- 
dition occurs during the emulation, only 
the pulse output and the emulation is 
continued. The trigger can also be used 
for a hardware break. 

Function : 

Enable/disable. Address is 12 bit and 
may be specified as 0 , 1 or “don't care" 
designation. 

Status: 

Opcode fetch 
Memory access 
Memory read 
Memory write 
Port access 
Port write 

Data : 

8 bit name. Each bit can be specified 
as 0, 1 or “don't care." 


1-4 


ICD-178 for 8048 USER’S MANUAL 


1-4 


1.4 SPECIFICATIONS (Emulation) 


External Trigger 
break 

Software Break 
Specification 

Real-time trace 

Trace capacity 
Trace data 

Trigger function 


Breakpoint; 1 channel - TTL level 
Functional specification; HIGH edge or 
LOW edge. 


8 points; 0-7 

Specify enable/disable of all software 
points . 


The addresses, data and status during 
emulation may be stored in storage mem- 
ory in real-time. 

2K X 32 bits. 

A 0-11, D 0-7 
Program memory 
Data memory 
RD WR 
PORT 

End monitor 
Begin monitor 
End event 
Begin event 
Center event 
Multiple event 
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1.5 CONTROLS and COMPONENT FUNCTIONS 


Section 1.5 explains and identifies various controls and 
components of the ICD-178 Emulator. 

POWER switch. This switch is used to supply power to 
^ the ICD-1 78. 

CLOCK select switch. This switch is used to select be- 
tween the external target (EXT) and the internal ( INT ) 

ICD CPU clock. 

^PERSONALITY MODULE. This module allows the user to 
select various supporting hardware devices. 

^pBUSY lamp. This LED comes on when the ROM programmer is 
running. DO NOT REMOVE THE ROM PROCESSOR WHEN THE BUSY 
LAMP IS ON. 

^^ROM socket. This is the 8048 series ROM processor pro- 
gramming socket. To insert a ROM processor, lift up the 
small lever located in the recessed slot, insert the ROM 
processor and push the lever back into the recessed slot. 
Note the correct placement of the ROM processor in the 
socket . 
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^^HALT lamp. This LED comes on when the ICD CPU has stop- 
ped after executing a HELP instruction or when BUS 
ACKNOWLEDGE (BUSAK) is in progress. 

RESET switch. This momentary switch is used to reset 
the ICD-178 monitor. It is activated when the MONITOR 
lamp is on. 

^^MONITOR lamp. This LED comes on to indicate that con- 
trol is currently in the ICD monitor. It is off during 
emulation. 

^^ICE (In-circuit Enable) lamp. This LED comes on when 
the ICD is operating in the incircuit mode (11 or 12) 
with the target system. 

MON I TOR break switch. This momentary switch is used to 
return control to the ICD monitor during emulation. 

^^POWER lamp. This LED comes on when the ICD is energized. 



ICD Operator Panel Controls and Components 
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ICD Side Panel Controls and Components 


^^POWER select switch. This switch is used to select the 
proper power requirements for the ICD. Set the switch 
to 11 0/1 17V to run on a power supply of 110-120VAC or 
select 200/240V to run on a power supply of 200-240VAC. 
NOTE: Set this switch BEFORE connecting the power plug. 

^^Power connector. This connector is for the AC power plug. 

^^DC Fan connector. This connector is for the 24V DC fan. 
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ICD End Panel Controls and Components 


flSi TERMINAL port connector. This connector attaches a console 
to the ICD-178. In a standalone configuration (LOCAL), it 
is used to input or output ICD operator commands. In the 
REMOTE mode it is used for auxiliary I/O. 

HOST/AUX ( Host/Auxiliary ) port connector. This interface 
connector is used to connect a Host Computer system or 
auxiliary I/O to the ICD--178. In a standalone configur- 
ation (LOCAL), this port dumps objects, registers or 
memory to a host computer, printer, teletypewriter, etc. 

In REMOTE mode it can be used to input or output ICD 
operator commands under control of the host computer, 

^^LOCAL/REM (Local/Remote) select switch. This switch is 
used to select the ports through which the ICD operator 
commands are entered. 

^^DCE/DTE select switch. This switch is used to set the 
HOST/AUX port to RS232C data terminal equipment ( DTE ) 
or data circuit-terminating equipment ( DCE ) . The factory 
setting is DTE. 
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ICD Baud Rates 


BAUDRATE switches. These switches are used to set the 
baud rates for the TERMINAL and the HOST/AUX port. There 
are 14 usable baud rates available to the user. Baud rate 
switch letters E and F should not be used. Factory set- 
ting is 1 (9600bps) for TERMINAL and HOST/AUX ports. 

NOTE: To set baud rate, turn dial using flat-head screw- 
driver or equivalent. 
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ICD End Panel Controls and Components 


CPA In-circuit probe plug connector. 

9 CPB In-circuit probe plug connector. 

CAUTION: DO NOT REVERSE CONNECTIONS WHEN ATTACHING THE 
PROBES. CPA/CPB PROBE MISMATCH WILL CAUSE DAMAGE TO THE 
ICD-178. 

^^EXT. BRK. (External Break) connector. This is used to 
connect an external break cable to the ICD. 

EVENT TRG. (Event Trigger) connector. This is used to 
connect an event trigger cable to the ICD. 

o E.M.SEL (Emulation Select) switch. This switch is used 
to set the machine cycle operation of the target system.^ 

^^CLKS (Clock) Simulator. When the external clock from the 
target system is used, the clock circuit must be simulat- 
ed on the SC1 dip plug in order to use the internal 8048 
clock circuit. 

Note: To remove clock simulator board, carefully pull the 
board straight out with a pair of needle-nose pliers. To 
replace, slide the board in the recessed slot on the left 
side of the holder and push it firmly in the socket. 
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^EMULATION SELECT SWITCH 

The Emulation Select switch implements specialized emulation 
conditions for the ICD-178 by modifying the machine cycle 
operation to the target system. Set this switch before per- 
forming emulation. 


Bit 3, 4 .... setting these bits (see below) effects the 

selection of the Object MCU and corresponding 
ICD internal program memory for the various 
processor families. 


Bit 2 


not connected. 


Bit 1 .... OFF. This interfaces the ICD to memory devices 

that have slow access times. 

Bit 1 ... ON. This interfaces the ICD to memory devices 

that have normal access times. 


12 3 4 

I ON — I MCU TYPE SELCT 

OFF— ' (AUTO MAPPING) 

ON (N. C) 

ON ADDRES OUTPUT SELCT 


Bit 3 

Bit 4 

Group 

Object mcu 

Internal Program Memory 

OFF 

OFF 

0 

8535,8039,8040 

OKbyte 

OFF* 

ON* 

1 

8048,8748 

1Kbyte 

ON 

OFF 

2 

8049,8749 

2Kbyte 

ON 

ON 

3 

8050 

4Kbyte 


* FACTORY SETTING 
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External Break Cable 


12 3 4 



Ground. Connects to the target system GND 


Mapping Control. A low level at this input 
DURING 11 (in-circuit MODE 1), SETS ALL 
MAPPING TO USER MEMORY. 


Not connected. 

External Break. External trigger input. 
Positive or negative edge causes the ICO 

TO GENERATE A BREAK. 



Event Trigger Cable 


1 2 3 



Ground. Connects to the target system GND 

LINE. 

Emulation Qualify. Outputs a Low level (TTL) 
signal while the ICO is emulating the target 

PROCESSOR . 

'Event Trigger. Outputs a Low level pulse 

(TTL) WHEN EVENT CONDITION 15 MET. USED AS 
A TRIGGER FOR A LOGIC ANALYZER, OSCILLOSCOPE, 
ETC. 
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CPU Plug Probe 


CSA/CSB In-circuit Probe Connector. Connects CPA to CSA and 
CPB to CSB. 

IMPORTANT: WHEN CONNECTING THE IN-CIRCUIT PROBE, NOTE THAT 
THE CABLE WITH THE LONGEST LENGTH (CSB) MUST BE CONNECTED TO 
THE TOP (CPB) PROBE CONNECTOR OF THE ICD. 

^^ CSA In-circuit Probe Connector A (BOTTOM). 

^^CSB In-circuit Probe Connector B (TOP). 

^^Pin . Plugs into the CPU target processor socket. 

Note the proper polarity mark. 

^^Polarity mark. 

^Pin . 
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External Break Cable. Connects to the EXT. BRK. socket of 
the ICD-178. 

^^External Break Probe (red). 

^Map Control Probe (yellow). 

^^Ground clip (black). 



Event Trigger Cable. Connects to the Event TRG. socket of 
the ICD-178. 

Event Trigger Probe (green). 

^^Emulation Qualifier Probe (white). 

^^Ground clip (blaclc) . 
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DC Fan Unit 


DC Fan Unit. Attaches to the rear panel of the ICD-178. 


9 


Fan Hook. Insert the fan hooks into the grooves located 
on the rear panel of the ICD-178. 

Fan Plug. Insert this plug into the DC Fan Power Con- 
nector (24V DC) located on the rear panel. 








1.6 SYSTEM CONFIGURATIONS 


Section 1.6 explains the various ICD system configurations. 
Refer to this information when interfacing your ICD-178 
to other communication devices, such as a host computer, 
printer, terminal console, and when connecting the emulator 
to the target system. Also included is a diagrammatic represen- 
tation of the system configurations and start-up procedure 
for the ICD-178. 


The ICD-178 may be set up to run in one of three different 
modes ; 

1) LOCAL mode (standalone configuration) 

In this mode, the ICD-178 is connected to a console ter- 
minal through which commands are entered. The ICD may be 
used with or without a target system in this mode. The 
HOST/AUX port may be used to connect a printer to the 
ICD. Hardcopy results may then be produced by issuing 
a "PRINT” command. 

2) LOCAL mode (standalone with host computer) 

In this mode, the ICD-178 performs object file input/ 
output with a host computer. ICD operator commands are 
entered from the console terminal connected to the host 
computer. A "USER" command allows direct communication be- 
tween the ICD console terminal and the host computer. 

3) REMOTE mode 

In this mode, input/output from the host computer is per- 
formed by the utility software program ZICE. ICD operator 
commands are entered using the host computer's keyboard. 
The ICD-178 can then use the "Z" commands found in the 
COMMAND REFERENCE GUIDE. 
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SYSTEM ICD>- 

CONFIGURATION T 


LOCAL (standalone) 






ICD 


TARGET 

SYSTEM 


LOCAL (standalone with Host Computer) 



REMOTE 


ZICE 



System Ci 


1-20 


ICD-178 for 



USER’S MANUAL 


1-20 




1.7 HOW TO OPERATE YOUR ICD-178 


Section 1.7 tells you how to get your ICD-178 running and 
ready to accept commands. Before connecting the ICD-178 to 
any external device, make sure that the power to each com- 
ponent is OFF. Refer to Section 1.5, CONTROLS and COMPONENT 
FUNCTIONS to identify the controls and external components 
of the ICD-178. 


1 ) Set the LOCAL/REM and DCE/ 
DTE switches of the ICD-178 
to the positions specified 
in the System Configuration 
diagram (Section 1.6). 

2) Set the ICD baud rates for 
the TERMINAL and HOST/AUX 
ports (normal setting is 
9600 bps), then set your 
system to that same rate. 

3 ) Set the ICD Emulation Select 
switch for the proper mach- 
ine cycle operation desired, 
otherwise leave at the fac- 
tory setting (see Section 
1.5). 

4) Attach the cooling fan to 
the ICD-178 and connect the 
power plug to the socket on 
the side of the unit. 

5) Connect the RS-232 cable(s) 
to your monitor, printer or 
host computer and then to 
the ICD's TERMINAL or HOST/ 
AUX port connectors. 

6) Remove the existing CPU 
(8048) from the target 
system and insert the CPU 
In-circuit probe ( 40-pin 
end) into the target sys- 
tem's CPU socket. 


f LOCAL 



REM A 


TERMINAL 

I — I 


DCE 



DTE 


HOST/AUX 
I ] 



noon 

12 3 4 






NOTE: Do not place the cables close to the target system's 
power supply or interference may result. 
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7) 


Connect the CSA/CSB In- 
circuit probe connectors 
to the ICD CPA/CPB con- 
nectors. The cable with 
the longest length (CSB) 
must be connected to the 
TOP (CPB) In-circuit plug 
probe connector on the 
ICD's end panel. 


TOP 



A B 



IMPORTANT: THE CABLE WITH THE LONGEST LENGTH (CSB) MUST BE 
CONNECTED TO THE TOP IN-CIRCUIT PLUG PROBE CONNECTOR. 


CAUTION: DO NOT REVERSE PLUG PROBE CONNECTIONS. CSA/CSB 
MISMATCH WILL CAUSE SEVERE DAMAGE TO THE ICD-178. 


8) Connect the ICD and target 
system to the same primary 
power supply. Be sure all 
power is OFF before con- 
necting components. 



9) Select the proper voltage 
by setting the POWER select 
switch located on the ICD's 
mainframe . 


100 V 
100 V 


200 V 
240 V 


10) Set the CLOCK switch located 
on the ICD's Operator Panel 
to either EXT (external-target 
clock) or INT ( internal-ICD 
clock). INT is the normal 
setting . 



CLOCK 


11) Turn the target system's 
power ON. 



12) Turn the console's power 
ON. 




ON 

l®| POWER 


13) Turn the ICD's power ON. A 
response message will then 
be displayed on the console, 
after which the emulator will 
wait for a command. 
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SECTION il 

COMMAND REFERENCE GUIDE 

2.1 COMMAND FUNCTIONS 

The ICD-178 for 8048 is capable of executing 32 major debug- 
ger commands. A portion of these commands are divided into 
various sub-commands for a total of 63 different debugger 
command formats. 

The following is a listing of the 32 major debugger commands 
with a brief explanation of each command's main function. To 
see a detailed explanation of each command, turn to Section 
2.9 - MASTER COMMAND GUIDE. If you are using the ZAX ICD-178 
emulator for the first time, read Sections 2.3 - 2.6 to be- 
come acquainted with the input format, syntax explantion and 
address/data parameters. 

EMULATION MODE Page 

Incircuit (Sets or displays incircuit mode) 2-57 

Map (Sets or displays event point conditions).. 2-61 

Pin (Sets or displays CPU pin status) 2-69 

DEBUGGING & BREAK/EVENT 

Break (Sets or displays breakpoint conditions)... 2-17 

Event (Sets or displays event point conditions).. 2-35 

Go (Begins program execution) 2-43 

Next (Begins program execution trace mode) 2-65 

Trace (Sets or displays trace mode conditions)... 2-89 

MEMORY : I /O : REGISTER 

Assemble (Converts assembly code to machine code)... 2-15 
Compare (Compares data between user and program 

memory) 2-29 

Disassemble (Displays processor assembly code ) 2-31 

Dump (Displays hexadecimal memory contents) 2-33 

Examine (Displays memory contents in either ASCII 

or hex data) 2-39 

Fill (Fills memory with ASCII or hex data) 2-41 

Move (Moves data between user and program 

memory ) 2-63 

Port (Examines and changes I/O port contents)... 2-71 

Register (Changes or displays processor registers).. 2-77 

Search (Searches memory contents for ASCII or 

hex data ) 2-83 
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PROGRAM INPUT/OUTPUT 


Page 


Load (Loads object program from host system 

file or specified port........ 2-59 

Save (Saves memory contents to a disk file on 

the host system) 2-81 

Verify (Compares an Intel hex format file to the 

ICD memory) 2-95 


REAL-TIME TRACE 


History (Displays real-time storage contents) 2-45 

ROM MANIPULATION 

Rom (ROM writer) 2-79 

OTHERS 

Calculation (Displays calculation of hexadecimal and 

decimal data) 2-27 

HOST (Sets LOCAL HOST-ON mode for standalone 

operation with host computer system) 2-53 

Identify (Displays current ICD device name and 

firmware version) 2-55 

Offset (Sets value in offset register for 

relative addressing) 2-67 

Print (Controls output of ICD commands to an 

external printer).... 2-73 

Quit (Reboots to host system). 2-75 

Supervisor (Sets a breakpoint as a supervisor call)... 2-85 
User (Allows terminal console to be used for 

host computer console) 2-93 

Zice (Expands operation commands)... 2-97 
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2.2 DEBUGGING OPERATIONS 


DEBUGGING OPERATIONS deals with using specific emulator com- 
mands to perform basic debugging operations. These programs 
are grouped under the following categories; 

A) PROGRAM DEBUGGING 

B) DEBUGGING THE TARGET SYSTEM 

C) USING THE REAL-TIME TRACE 

D) REGISTER/MEMORY MANIPULATION 

E) COMMUNICATION WITH A HOST COMPUTER 

F) ROM MANIPULATION. 

The following is a listing of specific debugging instructions 
which are listed under the six major categories. The infor- 
mation in ( ) shows the command used to execute the operation. 

To locate a specific example when using DEBUGGING OPERATIONS, 
locate the two separate numbers that follow the operation 
instruction. The first number refers to the section/page 
number, and the second number indicates the example number. 


A) PROGRAM DEBUGGING ‘Page/No. 

Set an instruction execution break (Break) 2-22/2 


Set a break and specify the address range (Break) .. 2-22/3 


Set a breakpoint so that a break occurs when 

specific data is written in (Break) 2-22/4 

Set a software break (Break) 2-23/5 

Display the current breakpoint status (Break) 2-23/6 

Cancel breakpoints (Break) 2-23/7 

Display the passing status of an event (Break) 2-24/8 

Perform tracing of all instructions (Trace) 2-90/57 

Trace the branch instructions only (Trace) 2-90/58 

Perform a step trace (Trace) 2-91/59 

Display the current trace status (Trace) 2-91/60 

Cancel trace (Trace) 2-91/61 

Trace a 5-step program (Next) 2-65/36 
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A) PROGRAM DEBUGGING (continued) 

Generate an event trigger when a specific address or 

data message is written in (Event) 2-36/15 

Set an event trigger as a break (Event) 2-36/16 

Display the current event status (Event) 2-36/17 

Cancel the event points (Event) 2-37/18 

Set a breakpoint so that a break occurs only after 
an event is generated (Break) 2-24/9 

Restart the user program (Go) 2-43/21 

B) DEBUGGING the TARGET SYSTEM 

Transfer the contents of the target memory to the 

program memory (Move) 2-63/35 

Substitute the ICD memory for a part of the target 

system memory (Map) 2-62/32 

Map the memory (Map) 2-62/33 

Display the current mapping status (Map) 2-62/34 

Make the Input Interrupt signal invalid (Pin) 2-69/40 

Display the current interrupt signal status (Pin) .. 2-69/41 

C) USING THE REAL-TIME TRACE 

Count the number of execution machine cycles 

(History) 2-50/22 

Record the memory contents 2K cycles before a break 

in the user program (History) 2-50/23 

Record the memory contents 2K cycles after the start 

of the user program (History) 2-51/24 

Record the memory contents 2K cycles before and after 

the generation of an event trigger (History) 2-51/25 

Record the contents of the user program for a dura- 
tion of 256 machine cycles each time an event trigger 
is generated (History) 2-52/26 

Perform a real-time trace memory search for the l/O 

port write cycle (History) 2-52/27 
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D) register/memory manipulation 

Change the contents of a register (Register) ' 2-77/46 

Display the contents of a register (Register) ...... 2-77/47 

Fill memory (Fill) 2-41/20 

Display and disassemble the memory contents 

(Disassemble) 2-31/13 

Replace the memory contents with assemble codes 
(Assemble) 2-15/1 

Display the memory contents in byte units (Dump) ... 2-33/14 

Change the memory contents in byte units (Examine) . 2-40/19 

Transfer the memory contents between user and ICD 

memories (Move) 2-63/35 

Display the address where specific data is 

located (Search) 2-83/55 

Compare memory data and display the unmatching 

data and the location address (Compare) 2-29/12 

Display the memory contents in Intel Hex format 

(Save) 2-82/54 

Set offset registers for relative addressing 

(Offset) 2-67/37 

Disassemble and display the memory contents 

specified by relative addressing (Offset) 2-68/38 

Display the current offset register status 

(Offset) 2-68/39 

Write data into the BUS port (Port) 2-72/42 

Change the port contents in byte units (Port) 2-72/43 
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E) COMMUNICATION WITH A HOST COMPUTER 

Read a file from the host system (Load) 2-60/30 

Read a file from ZICE in the host system (Load) 2-60/31 

Save a file (Save) 2-82/52 

Save a file from ZICE in host system (Save) 2-82/53 

Compare and verify the memory contents with a, file 

in the host system (Verify) 2-96/63 

Compare and verify the memory contents with a file 

read from ZICE in the host system (Verify) 2-96/64 

Reboot the host system (Quit) 2-75/45 

Use the monitor connected to the TERMINAL port as 

the console of the host system (User) 2-93/62 

Output the contents displayed on the consdle to a 

list device (ZICE) 2-97/65 

Connect the ICD to the XICE of the host computer 

system (Host) 2-53/28 

F) ROM MANIPULATION 

Write the contents of ROM into the emulator memory 

(ROM) 2-80/48 

Write the memory contents into ROM (ROM) 2-80/49 

Write the Intel Hex file of the host system into 

ROM (ROM) 2-80/50 

Display the current Group and ROM type (ROM) 2-80/51 
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2.3 HOW TO ENTER COMMANDS 


Use the MASTER COMMAND GUIDE to show you the required input 
format, address/data parameters, and syntax explanations for 
the 32 debugger commands. To locate a command for a partic- 
ular application, see either COMMAND FUNCTIONS or DEBUGGING 
OPERATIONS (Section 2.1, 2.2). Once you have found the com- 
mand , see SYNTAX for the proper input format. 

All commands begin with a derivative of the command name. 

This is usually the first or first two letters of the 
command name (such as CO for COMPARE). After the command 
name is entered, command parameters specify the operation 
of each command. 

Items which are designated as KEYWORDS are displayed by BOLD 
characters (such as M, ON, OFF, HI, UP). They represent input 
choices that you must enter. Lowercase letters show items 
which you must supply (USER-SUPPLIED ITEMS). USER-SUPPLIED 
ITEMS include input information such as an address or data 
parameter. This information may be shown by an abbreviated 
format such as "int_point" for "initiation pointer." 

Once you are familiar with the USER-SUPPLIED ITEMS, you may 
wish to dispense with the MASTER COMMAND GUIDE and use the 
COMMAND REFERENCE GUIDE. This guide shows you all available 
input parameters for the 63 different command formats. 

To see an example of a command with the format and parameters 
explained, see the COMMAND FORMAT EXAMPLE (Section 2.4). 
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2.4 COMMAND FORMAT EXAMPLE 


COMMAND: History format display 

FUNCTION: Displays in disassembled or machine cycle format; 


>H m|d [,intj)oint] [, term_point] <cr> 


M :display in machine cycle format. 

D :display in machine cycle and disassembled 

format . 

int_point : initiation - point to begin display at 
[decimal 1 to 2047]. 

term_point : termination - display termination pointer 
[decimal 1 (default) to 2047]. 

EXAMPLE : 

NOTES : 


In this example; . 

COMMAND: - the command name is found here. 

FUNCTION: - the command description is found here. 

SYNTAX: the command input format is found here. The syntax 

for this command shows a vertical line ("LO 
between M and D which indicates that you must select 
either M or D. The brackets (”[]”) around int _j)oint 
and term _j)oint indicate that these two parameters 
are OPTIONAL. 

TERMS: - TERMS explains the parameters of the syntax. In this 

example 9 int^oint and term _j)oint represent address 
or data information which you must supply. Explana- 
tions for this information are shown on the right. 

- the between int and point (int ^oint) and term 
and point (term _point) indicate that these words go 
together to form a statement. 

EXAMPLE: - an example for the command would follow the '^EXAMPLE" 

title. 

NOTES: -any important points about the command would follow 

the ” NOTES” title. 


SYNTAX: 
TERMS : 
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2.5 NOTES ON COMMAND FORMATS 


♦Keywords such as; M, ON, OFF, ME, CLR etc, are displayed 
by BOLD characters. They represent single letters or words 
which you must enter. Any combination of upper/ lower case 
letters may be used. 

♦Lowercase letters show items which you must supply, such 
as "filename" in which you would enter the name of a 
selected file. 

♦a vertical line "I" is shown to indicate a choice between 
items which must be selected, such as; 

ON I OFF 

ON or OFF may be entered, but not both. 

♦items shown in brackets, "[ ]" indicate parameters which 
are OPTIONAL. 


♦include all punctuation such as commas, equal signs, colons, 
slashes, etc. 

♦The address/data parameters are given at the end of the 
explanations and grouped as " [ phyl 2/hexdata/L byte/ASCII 
32, etc]." 


These address/data parameters include; 


[phy10/12] 
[ hexdata ] 

[L byte] 

[ASCII 32] 

decimal 


rhexadecimal physical memory address. 
:word or byte data (8/16 bit). Valid 
range is 0-F and X, 

:number of bytes. Hexadecimal 16-bit, 
0-F. 

:ASCII codes. All ASCII A thru Z char- 
acters (32) can be used. 

:decimal values are specified within 
the brackets. 


♦Commands and examples are numerically identified and may 
be located by referencing either Section 2.1 - COMMAND 

FUNCTIONS, 2.2 - DEBUGGING OPERATIONS or 2.8 - COMMAND 
DIRECTORY. 

Squares identify command formats. 

Circles identify example types. 
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2.6 COMMAND INTERRUPTION and CORRECTION 


INTERRUPTION Process 


Emulation stop 

after GO command : press the MONITOR switch on Operator Panel* 

Stop ^pressing the <ESC> key on console keyboard 

stops the corresponding command. 

Interrupt <SP> :pressing the (space) bar on the console 
keyboard causes an interrupt after one 
line is displayed on screen. To restart 
display, press (space) bar again. 


CTL-S : pressing the CTR-S key on the console 

keyboard temporarily freezes the display. 


CTL-Q :pressing the (CTL-Q) key on the console 
keyboard restarts the display. 


INPUT STATEMENT CORRECTION 

Correction of 

one character : <DEL> (delete ) Rubs out the specified 

character ( s ) . 

Backspace : <BS> ( backspace ) Backspace rubs out the 

the character as it backspaces over it. 

Cancellation of 

all data entry : <NAK> Pressing (CTL-U) cancels all 
entry data. 
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2.7 ERROR MESSAGES 



UNABLE BREAK ADDRESS 


a software break is specified 
in the non-RAM area 


MULTI BREAK ADDRESS 


a software break is duplicated 
at the same address 


WARNING UNABLE SOFT BREAK 


a software break is set at the 
address presently not mapped 
in RAM 


*** 

FILE 

NOT FOUND 

All 

*** 

DISK 

READ ERROR 

All 

*** 

DISK 

WRITE ERROR 

All 

*** 

NO DIRECTORY SPACE 

All 

c?> 



All 

p?> 



All 

/?> 



All 


MEMORY WRITE ERROR AT XXX 


Assemble , Fill 
Load, Move, 
Examine 


no file exists 

a disk read error occurs 

a sum check error occurs 

no blank directory area available 

a command code error occurs 

a parameter code error occurs 

a modifier code error occurs 

there is a memory modification 
error (Verify failed). 


MEMORY TIMEOUT ERROR AT 
XXX 


XXXX INPUT ERROR 


BREAK BUSY 


Assemble , Dump , 
Examine, Load, 
Fill, Move 

Examine , 
Assemble , 

Port 

Break, Go 


memory in the target system 
does not respond to ICD access. 


an input error occurs - 
re-enter the command when this 
message is displayed. 

the break specification exceeds 
the specified limit. 
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2.8 COMMAND DIRECTORY 


ICD-178 for 8048/49 MASTER COMMAND GUIDE 

Major Commands: 32 

Total Command Formats: 63 


No. COMMAND Page 

1 Assemble specification 2-15 

2 Break status 2-17 

3 Hardware Break specification 2-17 

4 Hardware Break designation 2-17 

5 Hardware arm/individual designation 2-19 

6 Software Break specification 2-19 

7 Software Break op code specification 2-19 

8 Software Break designation 2-19 

9 External Break HI/lOW designation 2-21 

10 External Break ON/OFF designation 2-21 

11 Event Break designation 2-21 

12 Write protect break designation 2-21 

13 Break initialize 2-21 

14 Calculation 2-27 

15 Compare 2-29 

16 Disassemble 2-31 

17 Dump 2-33 

18 Event status 2-35 

19 Event specification 2-35 

20 Event designation 2-35 

21 Examine memory only 2-39 

22 Examine and change memory 2-39 

23 Fill 2-41 

24 Go 2-43 

25 History - real-time trace status 2-45 

26 History - real-time trace counter reset .... 2-45 

27 History - monitor trigger storage 2-45 

28 History - event trigger 2-47 

29 History - format display 2-47 

30 History - search (machine cycle) 2-49 
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No. COMMAND Page 


31 HOST 2-53 

32 Identification 2-55 

33 Incircuit status - 2-57 

34 Incircuit specification 2-57 

35 Load • • 2-59 

36 Mapping status 2-61 

37 Mapping specification 2-61 

38 Mapping - external data mapping 2-61 

39 Move 2-63 

40 Next 2-65 

41 Offset status 2-67 

42 Offset specification 2-67 

43 Pin status 2-69 

44 Pin specification 2-69 

45 Port examination 2-71 

46 Port examination and change 2-71 

47 Print 2-73 

48 Quit 2-75 

49 Register status 2-77 

50 Register reset 2-77 

51 Register change 2-77 

52 ROM status 2-79 

53 ROM specification 2-79 

54 Save 2-81 

55 Search 2-83 

56 Supervisor status 2-85 

57 Supervisor specification 2-85 

58 Trace status 2-89 

59 Trace designation 2-89 

60 Trace specification 2-89 

61 User 2-93 

62 Verify 2-95 

63 ZICE 2-97 
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ASSEMBLE 


m COMMAND: 
FUNCTION: 

SYNTAX: 

TERMS : 

^ EXAMPLE : 


NOTES: 


ASSEMBLE specification 

Converts 8048 assembly code to 8048 machine code and 
changes the memory contents. This command is used for 
writing software patches using the emulators internal 
memory. 


>A memaddr <cr> 

XXX (8048 assemble code) 

XXX <cr> 


mem addr 


XXX 

(8048 a . c . ) 
(cr) 


:memory address where assembled code is 
stored [ phy1 0 ] . 

:next storage location. 

: instruction to be assembled and stored. 
:exit assemble mode. 


REPLACE THE CONTENTS OF THE MEMORY WITH ASSEMBLE CODES. 


The following command can replace the contents of the 
memory with Assemble codes when a part of the memory 
contents needs to be changed. In this example, "MOV 
@RO, A" and "INC RO" are written into 100(H) and 101(H) 
respectively; 


> A 100 <CR> 

100 MOV eRO,A<CR> 

101 INC RO<CR> 

102 <CR> 

> 


1 ) Values for the operand must be given in a hexadecimal 
or decimal number beginning with 0--9. The hexadecimal 
number should end with "H." Addition/subtraction on the 
same line is permitted. 

2) This command cannot be used when the program memory 
is mapped in the target system. 
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BREAK 


^COMMAND: BREAK status 


FUNCTION: Displays the current break status. 


SYNTAX: 

|>B <cr> 



Q COMMAND: 

Hardware 

BREAK specification 


FUNCTION: 

Sets a hardware break. 


SYNTAX: 

1 >B [/a] [/b] [/c] stat raddr I port pass count] <cr> 


TERMS : 

AjBl C 

: hardware break name. 



stat > > > 

break status; 



M 

:memory access 



MR 

: memory read 



MW 

:memory write 



P 

:port access 



PR 

:port read 



PW 

:port write 



OF 

:operation code fetch 



addr | port 

>>> specifies a break address or break 

port; 


addr 

: [phyl 2 ] . 



port 

: [specifies port; BUS, P1 thru P7]. 



passcount 

:break pass count [decimal 1 (default) 

to 



65535 ] . 



□ 

COMMAND: 

Hardware BREAK designation 


FUNCTION: 

Turns ON, OFF or clears (CLR) a specified hardware 
breakpoint . 


SYNTAX: 

1 >B [/a] [/b] [/c] ON 1 OFF 1 CLR <cr > 


TERMS : 

a|b|C : hardware breakpoint name. 
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BREAK 


Qj COMMAND:' 
FUNCTION: 

SYNTAX: 
TERMS : 

U COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


121 COMMAND: 
FUNCTION: 

SYNTAX: 
TERMS : 

121 COMMAND: 
FUNCTION: 

SYNTAX: 
TERMS : 


Hardware arm/individual BREAK specification 

ARM enables a break to occur after an event trigger 
takes place. INDividual allows a break to occur without 
regard to an event trigger. 


>B [/a] [/b] [/c] arm I IND < c r > 


A|b|C : hardware break name. 


Software BREAK specification 
Sets a software break. 


>B [/O] [/l] . - - [/7] addr [rpasscount] <cr> 


0-7 : software break name [0 thru 7]. 

addr : break address [phy12]. 

passcount : specifies break passing count [decimal 1 
(default) to 65535]. 


Software BREAK op code specification 

Specifies an operation code or enables/disables a 
software break. 


>B S= code|EN|DI <cr> 


code : operation code. 

EN : enables a software break. 

DI :disables a software break. 


Software BREAK designation 

Turns ON, OFF or clears (CLR) a specified software 
break. 


>b[/ 0] [/l] . . . [/7] ON I OFF I CLR <cr > 


0-7 : software break name. 
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BREAK 


I COMMAND: External BREAK HI/LOW designation 

FUNCTION: Specifies an external break to occur at the HI going 
or LOW going edge. 

SYNTAX: I 


y COMMAND: External BREAK designation 

FUNCTION: Turns ON, OFF or clears (CLR) an external break, 
SYNTAX: I 


[COMMAND: Event BREAK designation 

FUNCTION: Turns an event break ON or OFF. 


SYNTAX: 


[COMMAND: Write protect BREAK designation 

FUNCTION: Turns a write protect break ON or OFF, 
SYNTAX: I 


[COMMAND: BREAK initialize 

FUNCTION: Clears the event pass condition and resets the ARM 
specification. 

SYNTAX: ! 
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BREAK 


^EXAMPLE: 


^EXAMPLE: 


^EXAMPLE: 


SET AN INSTRUCTION EXECUTION BREAK. 

This command is used when a program break is desired 
after the execution of the instruction at a specified 
address. In this example, a break is generated after 
the instruction at 112(H) of the program memory has 
been executed when the address is fetched; 


> B OF r 112 <CR> 

>G 100 <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

112 90 MOVX @RO,A 08 00 00 00 00 00 00 00 00 00 00 

<Break Hardware A> 

> 


SET A BREAK WITH THE ADDRESS RANGE SPECIFIED. 

The following command can set a program memory 1 fetch 
break if a break is to occur after execution of the 
instruction stored in the fetched address. In this 
example, a break is generated after executing the 
instruction at the fetched address, 100(H) - 1FF(H); 


> B OF^IXX <CR> 

> G 10 <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

120 00 NOP 08 00 00 00 00 00 00 00 00 00 00 

<Break Hardware B> 

> 


SET A BREAK TO OCCUR WHEN DATA IS WRITTEN INTO A 
SPECIFIC ADDRESS. 

A memory write break can be generated by the following 
example if a program break is required for memory writ- 
ing. In this example, a break in the program occurs when 
data is written into the memory, 30(H) - 3F(H); 


> B MW,03X <CR> 

>G 30 <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

112 90 MOVX §RO,A 08 00 30 00 44 00 00 00 00 00 00 

<Break Hardware C> 

> 
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BREAK 


^EXAMPLE: SET A SOFTWARE BREAK. 

A software break can be generated by the following com- 
mand when the user program resides in RAM and a break 
near the execution of the instruction is desired. In 
this example a break is generated after execution of 
the instruction stored at 300(H); 


> B 300 <CR> 

>B S=EN <CR> 

>G 300 <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

300 00 NOP 08 34 45 22 00 00 00 00.00 00 00 

<Break Software 0> 

> 


^EXAMPLE: DISPLAY BREAK POINTS. 


Displays the current hardware, software, EXT. BRK. , 
write protect, and event trigger break status. In this 
example, hardware breaks A, B and C are currently ON, 
with addresses at 112, 1 XX and 03X respectively. Soft- 
ware 0 is currently ON at address 300. Software (S) 
break is enabled. Code used for software break is 00(H). 
Event (E) break is ON. Write protect (W) is ON; 


>B 

<CR> 









A 

(ON) 

OF 

112 

1 

0 

IND 

(0001 

0001 

0010) 

B 

(ON) 

OF 

IXX 

1 

0 

IND 

(0001" 

"xxxx" 

"xxxx ) 

C 

(ON) 

MW 

03X 

1 

0 

IND 

(0000“ 

"0011“ 

"xxxx ) 

0 

(ON) 


300 

1 

0 





S 

(EN) 

00 








E 

(OFF) 



1 

0 





W 

(ON) 



1 

0 






> 


^EXAMPLE: REMOVE BREAKPOINTS. 


Removes the current breakpoints. In this example. Hard- 
ware breakpoints A and B are removed; 


> B/A/B CLR <CR> 


>B 

<CR> 




c 

(ON) 

MW 

03X 

1 

1 

(ON) 


300 

1 

s 

(EN) 

00 



E 

(OFF) 



1 

w 

(ON) 





> 


0 IND (0000_0011_XXXX) 
0 

0 
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BREAK 


^EXAMPLE: DISPLAY THE EVENT PASS STATUS. 

This command shows if an event has been passed and if 
so, issues a message. In this example, "Event Done" shows 
that an event has been passed. If this message is not 
shown, the event has not been passed. Note that the >BN 
(cr) command returns to the pre-event pass state; 


> B <CR> 

Event done 

C (ON) MW 03X 1 0 IND ( 0000_0011_XXXX) 

1 (ON) 300 1 0 

S (EN) 00 

E (OFF) 1 0 

W (ON) 


^EXAMPLE; GENERATE A BREAK AFTER AN EVENT POINT IS PASSED. 

This command causes breakpoints to be effective only 
after passing event points. In this example, a break 
occurs if address 100(H) of the program memory is read 
after data named 55(H) has been read from 8F(H) of the 
external data memory; 


> EV CLR <CR> 

> EV ST=MW A=8F D=55 <CR> 

> B INI <CR> 

> B/A OF, 100 <CR> 

> B/A ARM <CR> 

>G 400 <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

100 05 EN I 08 00 00 00 00 00 00 00 00 00 00 

<Break Hardware A> 

> 
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BREAK 


NOTES: 


1) A maximum of 12 breakpoints is permitted; 3 hardware, 
8 software, and 1 external trigger break. If this 
limit is exceeded, the following message will be dis- 
played ; 

** Break Busy 

2) If a software break is set at a non-RAM address, the 
following address will appear; 

Unable Soft Break 

3) A break is automatically set to the ON status after 
clearing . 

4) A breakpoint specification automatically displays 
the latest event (A, B, C or 0 - 7), if it has been 
previously set. 

5) A break cannot be effected by accessing the internal 
data memory. 

6) An event break is not effected in the port write 
cycle of the instructions; [ANL BUS, #Data ] , [ANL 
Pp, #Data], [ORL BUS, #Data ] and [ORL Pp, j^Data ] . 
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CALCULATION 


U COMMAND: 
FUNCTION: 

SYNTAX: 
TERMS : 

^EXAMPLE: 


o EXAMPLE : 


CALCULATION 

Performs subtraction and addition of hex and decimal 
numbers. Both subtraction and addition operations can 
be performed on the same line. This command also per- 
forms hex/decimal data conversion. 


>C operand [± operand ] [±operand] <cr> 


operand :a decimal or hexadecimal constant in the 
range of -8388608 to 8388607, or 0 to 
FFFFFF(H) . 


PERFORM A CALCULATION OF HEX AND DECIMAL DATA. 

In these examples, decimal data is subtracted from 
decimal data and hex data is added to hex data with 
the answers displayed in both hex and decimal format; 


>C 1234+1234 <CR> 
H: 0009A4 

D: 2468 


>C lOOOH-FFFH <CR> 
H: 000001 

D: 1 


CONVERT A HEXADECIMAL NUMBER TO A DECIMAL EQUIVALENT. 

In this example, the hex address 105(H) is converted to 
a decimal equivalent; 


> C 105H <CR> 
H: 000105 

D: 261 
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COMPARE 


COMMAND: COMPARE 


FUNCTION: Compares the contents of a specified memory and then 
displays the non-matching data. 


SYNTAX: 


>CO[memdata] beg_addr , end_addr , [memdata] comp_addr [, UP | ,Pu] <cr 


TERMS : 


memdata >>> specifies type of data memory; 


R: 

D: 

P: 


: internal (default) 
:external 
: program 


beg__addr :beginning address for comparison [phy12]. 
end__addr : ending address for comparison [phy12,L byte]. 
comp__addr : beginning memory address to be compared 
[phy12]. 


UP :use beg_addr for the user memory and 

comp_addr for the ICD program memory. 

PU :use beg_addr for the ICD program memory 

and comp_addr for the user memory. 


^EXAMPLE: COMPARE THE CONTENTS OF DIFFERENT MEMORIES AND DISPLAY 

THE UNMATCHING DATA AND THEIR LOCATION ADDRESSES. 

The target memory and the program memory are compared 
and the unmatching data is displayed along with their 
location addresses. In this example, 0 -- FFF(H) of the 
target memory is compared with 0 -- FFF(H) and the un- 
matched data and their location addresses are displayed 
(*'Adrs'* and "M'* in the heading mean the address and 
memory content respectively); 


> CO P:0,FFF,P;0,UP <CR> 


Addr 

M 

Addr 

M 

000 

00 

000 

B8 

001 

01 

001 

FF 

002 

02 

002 

00 

003 

03 

003 

00 

004 

04 

004 

00 

005 

05 

005 

00 

006 

06 

006 

00 

007 

07 

007 

00 


> 
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DISASSEMBLE 



COMMAND: 


FUNCTION: 


SYNTAX: 


DISASSEMBLE 

Disassembles and displays the memory contents. 


>D I [beg_addr] end_addr] < c r > 


TERMS: beg__addr : beginning memory address [phy12]. 

end__addr : ending memory address [phy12/L byte], 
no addr : start at the current instruction pointer, 
current CS. 


^EXAMPLE: DISASSEMBLE AND DISPLAY THE CONTENTS OF THE MEMORY. 


Displays the memory contents in instruction words after 
they have been converted to assemble codes from hex 
format. In this example, beginning with address 400, 
the 20 byte contents are converted to assembled codes 
and then displayed. If disassembling is not possible, 
XXX will appear in the instruction portion; 


>DI 

400rL20 <CR> 


400 

B800 

MOV 

RO,#OH 

402 

B910 

MOV 

R1,#10H 

404 

BA20 

MOV 

R2,#20H 

406 

BB30 

MOV 

R3,#30H 

408 

BC40 

MOV 

R4,#40H 

40A 

BD50 

MOV 

R5,#50H 

40C 

BE60 

MOV 

R6,#60H 

40E 

BF70 

MOV 

R7,#70H 

410 

23FF 

MOV 

A,#OFFH 

412 

AO 

MOV 

@RO,A 

413 

0400 

JMP 

OH 

415 

00 

NOP 


416 

B80F 

MOV 

RO,#OFH 

418 

B901 

MOV 

R1,#1H 

41A 

BA02 

MOV 

R2,#2H 

41C 

BB03 

MOV 

R3,#3H 

41E 

BC04 

MOV 

R4,#4H 


> 




DUMP 


^COMMAND: 

FUNCTION: 

SYNTAX: 
TERMS : 


^EXAMPLE: 


DUMP 


Displays the memory contents in either byte or word 
units. The contents are represented by a hex number or 
ASCII code. 


>D [/w] [memdata] beg_addr [,end_addr] <cr> 


/W :dump memory contents on Word basis (default 

is byte basis ) . 


memdata >>> specifies type of data memory; 


R: 

D: 

P: 


: internal (default) 
:external 
: program 


beg__addr :beginning memory address for display [phy12]. 
end_addr :ending memory address for display [phy12/L 
byte ] . 


DISPLAY THE MEMORY CONTENTS IN BYTE UNITS . 

This command example displays the contents of the pro- 
gram memory in hexadecimal representation; 


>D P 

:100,L30 <CR> 

0 12 3 4 

5 

6 

7 

8 

9 

A 

B 

C 

D 

E 

F 

ASCII CODE 

100 

AO 18 00 00 00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 


110 

00 00 00 00 00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 


120 

> 

00 00 00 00 00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 
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EVENT 


H COMMAND: EVENT status 

FUNCTION: Displays the current event status. 


SYNTAX: 


>EV <cr> 


I COMMAND: EVENT specification 
FUNCTION: Sets or releases an event trigger. 


>EV [ST=stat] [A=addr| P=port] [D=data] <cr> 


TERMS: stat >>> event trigger status; 

M :memory access 

MR : memory read 

MW :memory write 

P :port access 

PR :port read 

PW :port write 

OP :op code fetch 

ANY : don’t care 

addr :directs event trigger at a specified break 

address [phy12] 

port :[ specifies bus port; BUS, P1 thru P7]. 

data :specifies event data [phy8]. 


gj COMMAND: EVENT designation 

FUNCTION: Turns ON, OFF or clears (CLR) an event trigger. 


SYNTAX: 


>EV ON I OFF CLR <cr> 
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EVENT 


^EXAMPLE; . GENERATE AN EVENT TRIGGER WHEN SPECIFIC DATA IS WRITTEN IN 
^ A SPECIFIC ADDRESS. 

This command is used when it is necessary to externally 
take out a passing point in a program. In this command, 
an event trigger is effected when the user program writes 
22(H) in location 33(H) of the external data memory; 


> EV ST~MW A«33 D^22 <CR> 
> 


^ EXAMPLE ; SET AN EVENT TRIGGER AS A BREAK. 

After setting a breakpoint by specifying status, address, 
data, etc., the following command entered will set an 
event as a break. In this example, a break is generated 
when the user writes 34(H) into location 24(H) of the 
external data memory; 


> EV ST=MW A=^24 D=34 <CR> 

> b/e on <CR> 

>G <CR> 

PC MC OP PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

000 90 MOVX §R0,A 08 34 24 00 55 00 66 00 00 00 00 

<Break Event > 

> 


^EXAMPLE; DISPLAY THE CURRENT EVENT TRIGGER STATUS. 

This command displays the current status of an event. In 
this example, MR (Memory Read) address is 34(H) and data 
is 44 (H) ; 


>EV St=MR A=34 D*44 <CR> 

>EV <CR> 

(OH) 

Status = MR 

Address = 034 (0000_0011_0100) 

Data = 44 (01000100) 

> 
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EVENT 


^EXAMPLE: CLEAR THE CURRENT EVENT TRIGGER. 


> EV CLR <CR> 
> EV <CR> 

Event is Clear 
> 


NOTES: 


1 ) A break by internal data memory access is not pos- 
sible. 

2) If an event is set after clearing, the event is set 
to the ON status. 

3) Event specifications effected by changes take on the 
latest condition specified. The previous conditions 
not effected remain as they were. 

4) Event trigger pulse is not generated during the port 
write cycle of an instruction. 
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EXAMINE 


I COMMAND: EXAMINE memory only 

FUNCTION: Examines the memory contents and displays it in either 
ASCII or hex data. 


>E [/w] [/n] [memdata] addr 


TERMS: /W :examine memory on a Word basis (default is a 

byte basis ) . 

/N :does not verify change. 

memdata >>> specifies type of data memory; 

R: :internal (default) 

D: : external 

P: : program 

addr : beginning address of examined memory 

[phy X, where x= 8 if memdata= R: or D: 

x=12 if memdata= P:]. 


COMMAND: EXAMINE and change 


FUNCTION: Examines and changes the memory contents to hex data. 


>e[/w] [memdata] addr=mod_data <cr> 


TERMS: /W : examine memory on a Word basis (default is a 

byte basis ) . 

memdata >>> specifies type of data memory; 

R: : internal (default) 

D: : external 

P: : program 

addr :memory address to be changed [phy12]. 

mod__data :data to write to memory [hexdata]. 

Note: While in repeat mode use; 

return (cr) : display next byte (word) of data, 

comma ,(cr) :display same byte (word) of data, 

caret A(cr) :display previous byte (word) of 
data . 

slash /(cr) :exit Examine command. 
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EXAMINE 


^EXAMPLE; CHANGE THE CONTENTS OF MEMORY IN UNITS OF BYTES. 

This command changes the contents of the memory in units 
of bytes. In this example^ 55(H) ^ 66(H) and 34(H) are 
written into locations 100(H), 101(H) and 102(H) using 
1 byte units; 


>E P;100 <CR> 


100 

04:55 

<CR> 

101 

00:66 

<CR> 

102 

00:34 

<CR> 

103 

00:/ 

<CR> 

> 
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FILL 


COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


FILL 

Fills a block of memory with either hex or ASCII codes; 


>F [/w] [/n] [memdata] beg_addr [,end_addr] ^data <cr> 


/W : specifies to fill memory contents on a Word 

basis (default is a byte basis). 

/N :does not verify memory contents. 


memdata >>> specifies type of data memory; 


R: 

D: 

P: 


: internal (default) 
: external 
: program 


beg__addr :beginning block address to be filled [phy12]. 
end_addr :end block address [phy12/L byte] 

(default = length of area to be filled). 

data :data that fills the block [hexdata/ASCII32 ] , 


^EXAMPLE: FILL THE MEMORY. 

This command fills the memory of a specific range with 
specified data. In this example, locations 0 3FF(H) 
are filled with 4E71(H); 


>F P;0,3FF,4E,71 <CR> 


>D P 

:0,100 

<CR> 















0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

A 

B 

C 

D 

E 

F 

ASCII CODE 

000 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNcjNcrNQNQ 

010 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

020 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

030 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

040 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

050 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

060 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

070 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 

080 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

4E 

71 

NqNqNqNqNqNqNqNq 
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GO 


COMMAND: GO 


FUNCTION: 

SYNTAX: 
TERMS : 


Executes the user program. The GO command with no par- 
ameters continues execution after a break. 


>G [beg_addr] [rend_addr] [,end_addr*] <cr> 


beg_addr :beginning address to execute [phy12] 
(default=the current PC is used). 
end__addr : ending address to execute [phy123. 
end_addr* :optional second end address [phy12]. 


^ EXAMPLE : 


RESTART THE USER PROGRAM. 


This command restarts the user program at the beginning 
(location 0) after clearing all registers. In this ex- 
ample, all the registers are cleared and the user program 
is executed starting at location 000(H); 


> R RES <CR> 

> G <CR> 

PC MC OP 

100 00 NOP PSW A RO Rl R2 R3 R4 R5 R6 R7 SP 

<Break Monitor> 08 33 00 21 34 33 45 00 00 00 00 

> 
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HISTORY 


^COMMAND: HISTORY 

FUNCTION (General): Specifies the trigger mode (6 types) for real- 
time tracing, and displays or searches for the user 
program operation to be traced. 


I COMMAND: Real-time trace status (HISTORY) 
FUNCTION: Displays the current trace status. 


SYNTAX: 


^^COMMAND: Real-time trace counter reset (HISTORY) 

FUNCTION: Clears (resets) the real-time trace counter; 


SYNTAX: 


I COMMAND: Monitor trigger storage (HISTORY) 
FUNCTION: Specifies the trigger mode. 
SYNTAX: 


TERMS : 


:end event trigger. Trace terminates when an 
event point is passed (range is 2045). 


EM :end monitor trigger. Trace terminates when 

control returns to the monitor (maximum 
range is 2045 ) . 
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HISTORY 


1^ COMMAND: 
FUNCTION 
SYNTAX: 
TERMS : 


^COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


Event trigger (HISTORY) 

Sets the trace specification. 


>H BM|BE|CE|ME[,range]<cr> 


BM :begin monitor. Trace section is initiated by 

emulation start and terminated after the 
number of words specified in the range par- 
ameter have been stored. 

BE : begin event. Trace begins when an event point 

is passed. 

CE : center event. The trace section is specified 

on either side of the event point. 

ME :multiple event. Trace is performed each time 

an event point is passed during loop proces- 
sing . 

range : specifies trace range (number of words to be 

stored) [decimal 1 to 2045]. 


HISTORY format display 

Displays in disassembled or machine cycle format. 


>H m| D [, int_point] term_point] <cr> 


M :display in machine cycle format. 

D :display in machine cycle and disassembled 

format . 

int_point : initiation - point to begin display at 
[decimal 1 to 2047]. 

term_point : termination - display termination pointer 
[decimal 1 (default) to 2047]. 
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HISTORY 


^COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


HISTORY search by machine cycle 
Searches for real-time trace contents. 


>HS , /addr I /port / [data] / [mem] [rint_point] [rterm_point] <cr> 


addr : address to begin search [hex], 

port >>> search port specification; 


BUS or P1 , P2, P3, P4, P5, P6, P7 

data :data to be searched for [hexdata]. 

mem >>> specifies history memory; 

MR: : memory read 

MW: : memory write 

PR: :port read 

PW: :port write 

OF: : opcode fetch 

int__point : initiation - point to begin display at 
[decimal 1 to 2047]. 

term_point : termination - display termination pointer 
[decimal 1 (default) to 2047]. 
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HISTORY 


^EXAMPLE: COUNT THE NUMBER OF EXECUTION MACHINE CYCLES. 

This command calculates the time required for execution 
of an instruction by counting the number of clock cycles. 
In this example, the number of machine cycles required 
for the execution of the user program between 400(H) and 
4FE(H) is 255 (decimal) and FF (hexadecimal); 


>H CLR <CR> 

>G 400, 4FE <CR> 

PC MC PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

4FE PE MOV A,R6 4F 12 OD 04 07 02 24 OD 12 09 07 
< Break Hardware A > 

> H <CR> 

LAE Counter = OOOOOOFF/255 
Storage mode = EM 
Storage Size = 256/256 
> 


^EXAMPLE: RECORD THE PROGRAM CONTENT 2K MACHINE CYCLES BEFORE A 

BREAK IN THE USER PROGRAM. 

This command sets a real-time trace at EM (End Monitor) 
and displays the memory contents before a break; 


>H EM <CR> 

>G <CR> 

PC MC 
489 00 NOP 

< Break Monitor > 
> HD <CR> 

Point T Addr DT 

2047 14E 4E 

2046 14F 4F 

2045 150 50 

2044 151 51 

2043 152 5253 

2041 154 5455 

> 


PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 


08 81 06 

OA 07 10 10 10 08 02 00 

ST OP 

ORL 

A,R6 

ORL 

A,R7 

ANL 

A,§RO 

ANL 

A,§R1 

JB2 

53H 

CALL 

255H 
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HISTORY 


(^EXAMPLE: RECORD THE PROGRAM CONTENT 2K MACHINE CYCLES AFTER THE 
^ START OF THE USER PROGRAM. 

This command sets a real-time trace at BM (Begin Monitor) 
and displays the contents of the program in disassembled 
format ; 


>H BM <CR> 


>G <CR> 












PC MC 

PSW 

A 

RO 

R1 

R2 

R3 

R4 

R5 

R6 

R7 

SP 

524 2425 JMP 125H 

< Break Monitor > 

>H D <CR> 

4A 

24 

03 

05 

OA 

23 

02 

OB 

OB 

OB 

02 


Point 

T Addr 

DT 

ST 

OP 

2047 

* 48A 

00 


NOP 

2046 

48B 

00 


NOP 

2045 

48C 

00 


NOP 

2044 

48D 

00 


NOP 

2043 

48E 

00 


NOP 

2042 

48F 

00 


NOP 


@ EXAMPLE: RECORD THE PROGRAM CONTENT 2K MACHINE CYCLES BEFORE AND 

^ AFTER THE OCCURRENCE OF THE EVENT TRIGGER. 

In this example, the content of the program 2K cycles 
before and after the occurence of the event (data 22(H) 
is written into location 46(H) of the external data 
memory; 


>EV ST=MR A=46 D=22 <CR> 

>H CE <CR> 

>G <CR> 

PC MC PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 

131 31 XCHD A,@R1 4B 06 05 OE OE OE 06 08 04 78 03 

< Break Monitor > 

>H D 


Point 

T Addr DT 

ST 

OP 


2047 

4FD FD 


MOV 

A,R5 

2046 

4FE FE 


MOV 

A,R6 

2045 

4FF FF 


MOV 

A,R7 

2044 

500 00 


NOP 



> 
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HISTORY 


@ EXAMPLE: RECORD THE USER PROGRAM CONTENTS FOR 256 CYCLES EACH TIME 

^ AN EVENT TRIGGER IS PASSED. 

This command records the program contents for 256 machine 
cycles each time an event occurs [data is written into 
location 56(H) 3 : 


>EV ST+MW A-56 D=XX <CR> 
> H ME ^256 <CR> 

> G <CR> 

PC MC 


281 81 

MOVX 

A,@R1 

< Break 

Monitor 

> 

>H M <CR> 


Point T 

Addr DT 

ST 

0258 * 

056 9F 

MW 

0257 

008 08 

OF 

0256 

BUS 

PR 

0255 

009 09 

OF 

0254 

PI 

PR 

0253 

OOA OA 

OF 

0252 

> 

P2 

PR 


PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 
08 00 01 03 07 00 23 11 08 02 00 


^EXAMPLE: DETERMINE WRITE CYCLE FOR A SPECIFIC l/O PORT FROM THE 

REAL-TIME TRACE MEMORY. 

The command used in this example analyzes machine cycles 
when data is written in the BUS port from the real-time 
trace memory? 


> G <CR> 

PC MC PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 
131 31 XCHD A^§R1 4B 06 05 OE OE OE 06 08 04 78 03 
< Break Monitor > 


>H S, 

/BUS//PW 

<CR> 

Point 

T Addr ] 

DT ST 

1858 

BUS 

PW 

1575 

BUS 

PW 

1292 

BUS 

PW 

1009 

BUS 

PW 

0726 

BUS 

PW 

0443 

BUS 

PW 

0160 

BUS 

PW 


> 


NOTES: 1 ) The real-time counter uses 32 bits of ALE as 1 cycle, 

2) The display of the real-time trace start storage 

pointers include the pointers just after the program 
was started and those where the program was started 
and the PC specified. If these pointers exceed 2047, 
a "Full" message is displayed. 
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HOST 


^COMMAND: HOST 

FUNCTION: Allows the use of symbolic debugging, "Z" command, etc. 

when the host computer is connected to the HOST/AUX port 
and the ICD is used in the LOCAL mode. 


>HOST ON I OFF <cr> 


TERMS: ON : establishes the HOST-ON mode v/hich connects 

the host system to the ICD in the LOCAL mode. 

OFF : reverts to the normal HOST-OFF mode. 

^EXAMPLE: CONNECT THE ICD TO XICE IN THE HOST COMPUTER SYSTEM (LOCAL 

MODE ) . 

This example command connects the ICD to XICE to perform 
Object file input from the host system, command input/ 
output (HOST-ON), symbol/number conversions or number/ 
symbol conversions, and to use the various commands 
expanded by the **Z*' command; 


> U ! <CR> 
A>XICE <CR> ! 
> HOST ON <CR> 
ZOS XICE VI. 0 
> 
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IDENTIFICATION 


1^ COMMAN D: IDENTIFICATION 

FUNCTION: Displays the ICD device name and a version of the in- 
stalled firmware. 


SYNTAX: 


>ID <cr> 


EXAMPLE: DISPLAY THE DEVICE NAME AND THE FIRMWARE VERSION. 

This command shows that the ICD-1 78 is for use with the 
i48 processor and the version is VI. 0; 


> ID <CR> 

ICD-178 for i48 VI. 0 
> 
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INCIRCUIT 


1^ COMMAND: INCIRCUIT status 


FUNCTION: Displays the current incircuit mode. 


SYNTAX: 


>I <cr> 


COMMAND: INCIRCUIT specification 


FUNCTION: Sets the ICD mapping mode. 


SYNTAX: 


>I 0|l|2 <cr> 


TERMS: 0 : System mode. Uses the ICD program memory. In 

this mode the target system I/O and interrupt 
signals are ignored. 


1 : Partial mode. Uses the ICD program and target 

(user) system memories. In this mode, interrupt 
can be qualified by using the "PIN" command. 

2 :Full mode. Uses only the target system memory. 

In this mode, the memories specified by the 
"map" command as RW or RO function as US mem- 
ory. The target system I/O and interruption 
signal is effective regardless of the "PIN" 
command setting. However, if the EA signal 
of the "pin" command is LOW, the program mem- 
ory assumes the following status; 


Group 0: Entire area is US. 

Group 1: 0-3FF is RO and 400-FFF is US. 
Group 2: 0-7FF is RO and 800-FFF is US. 
Group 3: Entire area is RO 


NOTES: In-circuit Mode and MAP/PIN command settings; 



set 

Mapping set Command 

PIN 

Set! 


Program mem 

XDM 

Command 

XVI oae 

RO 

US 

NO 

RO 

RW 

US 

NO 

EN 

D I 

I 0 

System Mode 

RO 

®0) 

NO 

RO 

RW 

:r w) 

NO 

(DI) 

D I 

I 1 

— 

Partial Incircuit Mode 

RO 


NO 

RO 

RW 

us 

NO 

EN 

DI 

I 2 

Full Incircuit Mode 

CUS) 

US 

NO 

(US) 

(US ) 

us 

NO 

EN 

(en; 


(RW) 

- functions 

as 

RW 

regardless 

of 

"MAP" 

setting . 

(OS) 

- functions 

as 

US 

regardless 

of 

"MAP" 

setting. 

(EN) 

- functions 

as 

EN 

regardless 

of 

"PIN" 

setting. 

(DI) 

- functions 

as 

DI 

regardless 

of 

"PIN" 

setting. 
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LOAD 


I COMMAND: LOAD 

FUNCTION: Downloads either a hex file on diskette or the object 
program (Intel format) from a specified port. 


SYNTAX: 
TERMS : 


filename 


message 


L lename] 


, message] ‘ 


:use the terminal port (ignore software hand- 
shake ) 

:use the terminal port (perform software 
handshake) 

:use the auxiliary port 

:use the host port 

: specifies the name of the file to download 
to the ICD (available with ZICE software 
only) . 

: specifies the memory address offset to be 
added to the object file being loaded. If 
omitted, starting address is specified 
[L byte ] . 

:load message [hexdata/ASCII 32]. "message" 
is entered in this form; 'message ',0D 
- where 0D represents a line feed. 

The ICD outputs the Load message to the 
TERMINAL or AUX port prior to loading the 
object program (Intel format) if /T or /A 
is specified, "filename" may be used for 
the Load message when the /P or /H port is 
specified. 


NOTES: 


Object File I/O Procedure 


MODE 

REMOTE 

LOCAL 

/T 

X 

X 

/P 

o 

0 

/A 

X 

X 

/H 

O 

0 

Default 

O (HOST) 

X (TERMINAL) 


o - The ICD inputs an Intel format file through 
handshaking. (See Section IV, COMMUNICATION 
PROTOCOL ) . 

X - The ICD inputs Intel format data only and does 

not perform handshaking. The data input ends upon 
receiving an end record (Intel format) or <EXT> 
(Control + C) through a specified port. 
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LOAD 


^EXAMPLE; 


^ EXAMPLE : 


READ A FILE IN INTEL FORMAT FROM THE HOST SYSTEM. 

When the host system is connected to the HOST/AUX port 
in the LOCAL mode and it supports the protocol at the 
ICD loading time^ this command loads a file from the 
host system in Intel format. In this example, the host 
system loads a file named FILE1 .HEX (Intel format); 


>L/H FILEl.HEX <CR> 
000 


READ AN INTEL FORMAT FILE FROM ZICE IN THE HOST SYSTEM. 

If ZICE software is being used in the REMOTE mode, this 
command loads a file from the host system (Intel format); 


> L FILEl.HEX <CR> 

000 

> 
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MAPPING 


^COMMAND: 

FUNCTION: 

SYNTAX: 


MAPPING status 

Displays the current map status. 


>MA <cr> 


COMMAND: MAPPING specification 


FUNCTION: Sets the ICD memory map. The target system or ICD pro- 
gram memory is used in 1 K byte increments. (For the 
relationship between mapping and the in-circuit mode, 
refer to the IN-CIRCUIT command.) 


SYNTAX: 


>MA beg_addr [, end addr] =inemspec <cr> 


TERMS : 


beg__addr :beginning address of mapping [phy12]. 


end_addr : ending address of mapping [phy12/L byte] 
memspec >>>> specifies the program memory; 

RO :read only memory 

NO :non memory area (a break occurs in this 

area if accessed by a program) 

US :user (target system) memory 


^COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


MAPPING - External data memory (XDM) 

Sets the external data memory mapping specification. 


>MA XDM=meinspec <cr> 


memspec >>> specifies the program memory; 

RO :read only memory 

RW : read/write memory 

NO :no (non) memory 

US :user (target system) memory 
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MAPPING 


^ EXAMPLE : 


^ EXAMPLE : 


EXAMPLE: 


SUBSTITUTE THE ICD MEMORY FOR A PART OF THE TARGET 
SYSTEM MEMORY. 

If the target system memory is partially faulty, the 
defective portion can be replaced with the ICD memory 
by this command. In this example, the *'I1 '* command sets 
the mapping mode, and the **MAP'* command allocates 0 -- 
3FF(H) to the program memory and 400FFF(H) to the user 
memory. The contents of the user memory can be trans- 
ferred to the program memory by the "MOVE" command if 
necessary; 


>11 <CR> 

> MA 0,3FF=RO <CR> 

> MA 400,FFF=US, <CR> 

> MOV P;0,FFF,P: ) ,UP <CR> 
> 


MAP THE MEMORY. 

The command in this example defines locations 0 -- FF(H) 
and 800 -- FFF(H) of the program memory and the external 
data memory as RO (Read Only). The location of the pro- 
gram memory 100 -- 7FF(H) is defined as NO (non-memory); 


> MA 0,=RO <CR> 

> MA 100,7FF=NO <CR> 
> MA 800,FFF=RO <CR> 
> MA XDM=RO <CR> 

> 


SHOW THE CURRENT MAPPING STATUS. 

In this example, locations 0 -- FF(H) of the program 
memory are allocated to US (User memory) , locations 
100 -- 3FF(H) are allocated to RO (Read Only) and loca- 
tions 400 -- 7FF(H) are allocated to NO (No memory); 


> MA <CR> 

In-Circuit Mode 1 
Group 3 
Program Memory 
OOO-OFF = US 
100-3FF = RO 
400-7FF = NO 
800-FFF - US 
XDM 

XDM = US 

> 
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COMMAND: MOVE 


FUNCTION: Moves memory between the ICD and the target system. 


SYNTAX: 
TERMS : 


>M[memdata] beg_addr , end_addr , [memdata] mov_addr [rUP | ,PU]<cr> 


memdata >>> specifies type of data memory; 


NOTES: 


R: 

D: 

P: 


: internal (default) 
:external 
: program 


beg_addr : beginning address of data source [phy12]. 
end__addr :ending address of data source [phy12/L byte]. 
mov_addr : beginning address for destination [phy12]. 


UP I PU >>> optional parameter (default = data is moved 
according to the memory map); 

UP : source is USER memory, destination is ICD • 

program memory. 

PU : source is ICD program memory, destination is 

USER memory. 


If "P:** is specified above, **PU" becomes invalid. When 
the "D:'* or "R:** destination is specified, the maximum 
transfer range is 256 bytes and '*mov_addr" is limited 
to 0 -- FF(H). If "D:" or "R:" is specified as the 
transfer area, the range of "beg_addr’* is 0 -- FF(H) 
and the transfer range is 256 bytes. 


^EXAMPLE: TRANSFER THE CONTENTS OF THE TARGET MEMORY TO THE 

PROGRAM MEMORY. 

This command transfers the contents of the user memory 
(residing in ROM) to the program memory, changing part 
of the contents. In this example, the contents of the 
user memory location is 0 -- FFF(H); 


> 11 <CR> 

> MO P;OrFFF,P;0,UP <CR> 
> E PLIOO <CR> 

100 00:01 
101 01 :/ 

> 
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NEXT 


COMMAND: NEXT 

FUNCTION: Executes n-step All trace display from the current 
pointer . 


>N [steps] <cr> 


TERMS: steps : specifies the number of instructions to exe- 

cute [decimal 1 to 65535]. 

^EXAMPLE: TRACE AND DISPLAY 5 STEPS BEGINNING AT THE CURRENT PC. 

When an unconditional trace is desired, this command 
traces all the instructions depending on the number of 
times specified. This trace mode is independent of the 
current trace mode. In this example, five instructions 
are traced starting at the current PC; 


>N 5 <CR> 


PC 

100 

MC 

18 

INC 

RO 

PSW 

08 

A 

00 

RO 

57 

R1 

67 

R2 

35 

R3 

01 

R4 

00 

R5 

00 

R6 

00 

R7 

00 

SP 

00 

101 

F8 

MOV 

A,R0 

. . 

57 

, . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

- . 

102 

19 

INC 

R1 

. . 

. . 

. . 

68 

. . 

. . 

. . 

. . 

- . 

. . 

. . 

103 

lA 

INC 

R2 

. . 

. . 

. . 

. . 

36 

. . 

. . 

. . 

. . 

. . 

. . 

104 

> 

IB 

INC 

R3 

• • 

• • 

• • 

• • 

• • 

02 

* • 

• • 

• • 

• “ 

* • 
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OFFSET 


125 COMMAND: 
FUNCTION: 
SYNTAX: 


OFFSET status 

Displays the current offset value. 


>0 <cr> 


COMMAND: OFFSET specification 


FUNCTION: 


SYNTAX: 


Sets a value (1 of 4) in an offset register for relative 
addressing. All offset registers can be used for ICD 
memory address parameters. 


>0 6f0 I &1 1 &2 I &3=addr <cr> 


TERMS : 


addr 

: addres: 


[hex1 6 

&0 

: offset 

&1 

: offset 

&2 

: offset 

&3 

:of f set 


- offset to place 


register 0 
register 1 
register 2 
register 3 


n the register 


^EXAMPLE: SET AN OFFSET REGISTER FOR SPECIFYING RELATIVE ADDRESSING. 

When debugging a program consisting of a number of dif- 
ferent modules, assign the difference between the address 
on the assemble list and the physical address to an offset 
register. The address on the assembly list may be found 
by adding the name of the offset register at addressing. 

In this example, the offset register, "&0" is set to 
325(H); 


> 0 &0=325 <CR> 

>D lO&O <CR> 

56789ABC DEF01234 ASCII CODE 

35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

> 


2-67 


ICD-178 for 8048 USER’S MANUAL 


2-61 





OFFSET 


^ EXAMPLE: 


^ EXAMPLE : 


DISASSEMBLE AND DISPLAY THE CONTENTS OF MEMORY LOCATIONS 
SPECIFIED BY RELATIVE ADDRESSING. 

This command disassembles and displays the contents of 
memory locations starting at an address plus the value 
specified in the offset register. In this example, the 
contents of memory 20(H) bytes after the location 20(H) 

+ &0 (offset register) are displayed? 


>DI 

20&0, 

L20 <CR> 


355 

55 

STRT 

T 

356 

5657 

JTl 

57H 

358 

58 

ANL 

A,RO 

359 

59 

ANL 

A,R1 

35A 

5A 

ANL 

A,R2 

35B 

5B 

ANL 

A,R3 

35C 

5C 

ANL 

A,R4 

35D 

5D 

ANL 

A,R5 

35E 

5E 

ANL 

A,R6 

35F 

5F 

ANL 

A,R7 

360 

60 

ADD 

A,@R0 

361 

61 

ADD 

A,@R1 

362 

62 

MOV 

T,A 

363 

00 

NOP 


364 

6465 

JMP 

365H 

366 

00 

NOP 


367 

67 

RRC 

A 

368 

68 

ADD 

A,RO 

369 

69 

ADD 

A,R1 

36A 

6A 

ADD 

A,R2 

36B 

6B 

ADD 

A,R3 

36C 

6C 

ADD 

A,R4 

36D 

6D 

ADD 

A,R5 

36E 

6E 

ADD 

A,R6 

36F 

6F 

ADD 

A,R7 

370 

70 

ADDC 

A,@RO 

371 

71 

ADDC 

A,@R1 

372 

7273 

JB3 

73H 

374 

7475 

CALL 

375H 


DISPLAY THE RELATIVE ADDRESSING (OFFSET REGISTER) STATUS. 

In this example, the current offset registers contain 
values of 298(&0), 198(&1), 2EC(&2) and C62(&3)? 


> OF <CR> 

60 = 298 

61 = 192 

62 ~ 2EC 

63 = C62 
> 
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PIN 


^COMMAND: PIN status 


FUNCTION: Displays the current pin status. 


SYNTAX: 

|>PI <cr> 


^COMMAND: 

PIN specification 


FUNCTION: 

Masks or unmasks the target system interruption 
when the incircuit mode is 11 . Interruptions are 
in the 11 mode and are valid in the 12 mode. 

signal 

ignored 

SYNTAX: 

|>PI spec=EN|DI <cr> 




TERMS: spec >>> specifies either; 


RESET :reset the pin specification 

SS : single step 

INT : interruption or hold signal enable 

EA :CPU/MEMORy separator 

EN DI : enable or disable the interrupt or request. 


^EXAMPLE: DISABLE THE INPUT OF INTERRUPT SIGNALS. 

This command example disables all the external inter- 
rupts in the II mode; 

>11 <CR> 


>PI RESET=D1 <CR> 


>pi 

SS=D1 

<CR> 

>pi 

INT=D1 

<CR> 

>pi 

EA=DI 

<CR> 


^EXAMPLE: DISPLAY THE CURRENT INTERRUPT STATUS. 

In this example, the current interrupt signal and mask- 
ing status shows that the RESET input and INT signals 
are disabled (DI) and that the SS and EA input signals 
and enabled (EN). Input for all four signals is H(1); 

> PI <CR> 

In-Circuit Mode 1 
RESET/ (DI) = H 

SS/ (EN) = H 

INT/ (DI) = H 

EA (EN) = H 
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PORT 


mi COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 


m COMMAND: 
FUNCTION: 
SYNTAX: 
TERMS : 

NOTES : 


PORT examination 
Examines the port contents. 


>P port <cr> 


port : [specifies port; BUS, P1 thru P7 ] . 


PORT examination and change. 

Examines and changes the port contents. 


>P port=data <cr> 


port : [specifies port; BUS, P1 thru P7 ] . 

data :new value of data [hex1 6/ASCII 8]. 


After inputing the port value, this command enters the 
repeat mode where the following control characters are 
recognized; 


return (cr) 
comma , ( cr ) 
caret A(cr) 
slash / ( cr ) 


:display next byte (word) of data. 
:display same byte (word) of data. 
:display previous byte (word) data 
:exit the PORT mode. 
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PORT 


^EXAMPLE: WRITE DATA INTO THE BUS PORT, 

This command writes data successively into the BUS port. 
In this example. Data, 01(H), 02(H), 03(H), 04(H) and 
05(H) are written into the BUS port in succession; 


> P BOS=01,02^03,04,05 <CR> 
> 


^EXAMPLE: CHANGE THE PORT DATA IN UNITS OF BYTES. 

In this example, 55(H) is written into and then read out 
of the PI port. Then 32(H) is written again into the PI 
port ; 


> P PI <CR> 

PI 55; 55, <CR> 
PI 55:32 <CR> 
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PRINT 


I COMMAND: PRINT 

FUNCTION: Outputs data sent from the ICD to the TERMINAL or HOST/ 
AUX ports simultaneously. The printer must be connected 
to the HOST/AUX port for this command to be effective. 

SYNTAX: 


TERMS : 


: output data to both TERMINAL and HOST/AUX 
ports . 


:output data to the console only. 


^EXAMPLE: PRINT THE CONTENTS DISPLAYED ON THE CONSOLE SCREEN. 


> PR ON <CR> 

>D O,L20 <CR> 

0123456789ABCDEF ASCII CODE 

00 57 68 36 02 00 00 00 00 00 00 00 00 00 00 00 00 Who 

10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

> 
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QUIT 


COMMAND: QUIT 

FUNCTION: Returns control to the host system (valid when using 
ZICE software only) . 


SYNTAX: 


>Q <cr> 




EXAMPLE: REBOOT TO THE HOST COMPUTER SYSTEM. 


> Q <CR> 
A> 
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REGISTER 


y COMMAND: REGISTER status 

FUNCTION: Displays the current register status. 


SYNTAX: 


>R <cr> 


I COMMAND: REGISTER RESET 

FUNCTION: Initializes all registers to 0 by pushing the RESET 
switch on the Operator Panel. 


SYNTAX: 


>R (push)RESET <cr> 


I COMMAND: REGISTER change 

FUNCTION: Changes the 8048 CPU register and program counter, 


SYNTAX: 


>R reg=data <cr> 


TERMS: reg >>> register name; 

RO thru R7 and RO' thru R7 ' 

PC SP A T CY AC FO BS FI* INITF* TCNTI* 

Note: * status only 

data :optional new value for the register contents 

[hexdata ] . 

^EXAMPLE: CHANGE THE CONTENTS OF A REGISTER, This command changes 

the contents of individual registers. In this example, 
the register RO is set to 55(H) and PC to 123(H); 


>R R0=55 <CR> 
>R PC=123 <CR> 
> 


^EXAMPLE; DISPLAY THE CONTENTS OF REGISTERS. 

In this example, the contents of the PC, SP, PSW, A, 
R0--R7, R0'--R7', T, MB, FI, I, and TCNT are displayed; 


> R <CR> 

PC CAFB210 A RO R1 R2 R3 R4 R5 R6 R7 RO 'Rl ' R2 'R3 ■R4 'RS 'RS 'R7 ' T MB FI I TCNT 

123 0000000 00 55 68 36 02 00 00 00 00 00 00 00 00 00 00 00 00 00 0 0 0 0 
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ROM 


^COMMAND: ROM status 


FUNCTION: Displays the current ROM type. 


SYNTAX: 


>RO <cr> 


COMMAND: ROM specification 


FUNCTION: 


SYNTAX: 
TERMS : 


Writes the contents of the ICD program memory into the 
ROM area of the 8748/49 through the ROM Writer, or reads 
the contents of the ROM area of the 8048/49 or 8748/49 
into the ICD program memory. 


>RO E I P I R I V I W [r beg_addr] [, end_addr] <cr > 


E|p|r|v|w >>> specifies ROM operation; 


NOTES: 


E 

P 

R 

V 

W 


: erase check 

: program - writes after check 
:read - reads data from ROM 

: verify - compares ICD program memory & ROM 
:write - writes to ROM 


beg_addr : start address of read/verify/write operation 
[phy12]. 

end_addr :end address of read/verify /write operation 
[phy12]. 


When ’'beg__addr" and '*end_addr" are omitted, the address 
range is specified as 0 -- 1023 (8748/8048) or 0 -- 2047 
(8749/8049) . 
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ROM 


^EXAMPLE: 


WRITE THE CONTENTS OF ROM INTO THE EMULATION MEMORY. 

This command lets the contents of ROM be written into 
the emulation memory for alteration and/or disassembling; 


>RO R <CR> 
-Reading 
-Verifying 
-OK 
> 


^EXAMPLE; WRITE THE MEMORY CONTENTS INTO ROM. 

This command stores a program in the memory into ROM; 


> RO W <CR> 
-Writing 
-Verifying 
-OK 
> 


^ EXAMPLE ; WRITE AN INTEL HEX FILE IN THE HOST SYSTEM INTO ROM. 

This command stores an Intel Hex file in the host system 
into ROM; 


> L FILE!. HEX <CR> 
000 

> RO W <CR> 
-Writing 
-Verifying 
-OK 
> 


^EXAMPLE; DISPLAY THE CURRENT GROUP AND ROM TYPE. 

In this example, the current group is set to 1 and the 
ROM is 87XXH; 


> RO <CR> 
Group 1 
87XXH 
> 


2-80 


ICD-178 for 8048 USER’S MANUAL 


2-80 



SAVE 


I COMMAND: SAVE 

FUNCTION: Saves the contents of a specified range of memory to a 
disk file on the host system. (The file format is the 
same as the LOAD command.) 

SYNTAX: 

TERMS: T :use the terminal port (ignore software hand- 

shake) 

P :use the terminal port (perform software 

handshake ) 

A :use the auxiliary port 

H :use the host port 

file :name of the file to be used for saving the 

memory contents (available with ZICE software 
only) . 

beg_addr : first address to save [phy24]. 
end___addr :last address to save [phy24/L byte]. 
user_addr :beginning user program address [phy24]. 

mes :save message [hexdata/ASCII 32]. "message" 

is entered in this form? ’message *,0D 
- where 0D represents a line feed. 

The ICD outputs the save message tp the 
TERMINAL or AUX port prior to saving the 
object program (Intel format) if the /T or 
/A port is first specified, "filename" may 
be used for the user defined save message 
when software handshaking is performed and 
the /P or /H port is specified. 


NOTES : 


Object File l/O Procedure 


MODE 

REMOTE 

LOCAL 

/T 

X 

X 

/P 

o 

O 

/A 

X 

X 

/H 

O ! 

O 

Default 

O (HOST) 

X (TERMI NAD 


o - The ICD inputs an Intel format file through 
handshaking. (See Section IV, COMMUNICATION 
PROTOCOL) . 

X - The ICD inputs Intel format data only and does 

not perform handshaking. The data input ends upon 
receiving an end record (Intel format) or <EXT> 
(Control + C) through a specified port. 
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SAVE 

® EXAMPLE: 


^EXAMPLE: 


^EXAMPLE: 


SAVE THE MEMORY CONTENTS IN THE HOST SYSTEM. 

In this example, the memory content (locations 0 -- FFF) 
is saved in the FILE2.HEX (Intel format) file of the host 
system; 


> SA/H FILE2.HEX,0,FFF,0 <CR; 
> 


SAVE THE MEMORY CONTENTS IN THE HOST SYSTEM THROUGH ZICE. 

When ZICE is being used (REMOTE mode), this command saves 
the memory contents. In this example, the memory contents 
(locations 0 -- FFF(H)) are saved in the FILE2.HEX (Intel 
format) file of the host system; 


> SA FILE2.HEX,0,FFF,0 <CR> 
> 


DISPLAY THE CONTENTS OF THE MEMORY IN INTEL HEX FORMAT. 

This command displays the memory content on the console. 
The TERMINAL port (T) designates I/O from the console. 

In this example, the program memory contents of 0 -- 100 
is displayed in Intel Hex format; 


>SA/T, 0,100,0 <CR> 

:20000000000102030405060708090AOBOCODOEOF10111213141516171819A1B1C1D1E1FFO 
:20002000202122232425262728292A2B2C2D2E2F30313233343536738393A3B3C3D3E3FD0 
:20004000404142434445464748494A4B4C4D4E4F505152535455565758595A5B5C5D5E5BO 
:20006000606162636465666768696A6B6C6D6E6F707172737475767778797A7B7C7D7E790 
;2008008081828384858687888898A8B8C8D8E8F909192939495969798999A9B9C9D9E9F70 
; 2 0 OAOO 0A0A1A2A3A4A5 A6A&A8AAAABACADAEAFAB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBF5 0 
:2000C000C0ClC2C3C4C5C6C7C8C9CACBCCeDCDCFC0DlD2D3D4D5D6D7D8D9DADBDCDDEDF30 
:2000E000E0E1E2E3E4E5E6E7E8E9EAEBECEDEEEFF0F1F2F3F4F5F6F7F8F9FAFBFCFDFEF10 

rOlOlOOOOOOFE 

rOOOOOOOlFF 
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SEARCH 



beg_addr :address to begin the search [phy12]. 
end_addr taddress to end the search [phy12/L byte], 
data :data for which to search [ASCII 32, hexdata]. 

^EXAMPLE: PERFORM A SEARCH WHICH WILL DISPLAY THE LOCATION 

ADDRESSES OF THE DATA SPECIFIED. 


In this example, the beginning address is 0 and 100(H) 
bytes of memory are to be searched. The^ object of the 
search is the ASCII character string 'ERROR'. The ad- 
dresses that contain data equal to 'ERROR' are the result 
of the search (048); 


> S P:O,L100, 'ERROR' <CR> 
048 

> 
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SUPERVISOR 


gj COMMAND: SUPERVISOR status 

FUNCTION: Displays the current Supervisor state. 
SYNTAX: I 


[COMMAND: SUPERVISOR specification 

FUNCTION: Specifies to use a breakpoint as a supervisor call. A 

supervisor call is used to output data, such as message, 
when a breakpoint specified as a supervisor call is 
passed. 


SYNTAX: 


TERMS : 


:use hardware break C as a supervisor call, 
:use software break 7 as a supervisor call, 
:user software break as a supervisor call. 
:use a supervisor call. 

:do not use a supervisor call. 


I EXAMPLE: OUTPUT A MESSAGE TO THE ICD FROM THE USER PROGRAM. 

In this example, a software break (00) is set and then 
turned ON ( >SU/U ON). When the user program is executed, 
a software break occurs because NOP (00) is executed. 
Control is then returned to the user program after the 
I/O operation of the ICD SIO is completed (when the 
Supervisor command is set to ON); 


>A 100 <CR> 


100 

MOV 

R1,#10H 

<CR> 

102 

MOV 

R7,#02H 

<CR> 

104 

MOV 

ArRl <CR> 

105 

MOVP A,@A <CR> 

106 

NOP 

<CR> 


107 

INC 

R1 <CR> 


108 

ORL 

A,#0 <CR> 

lOA 

JNZ 

2 <CR> 


IOC 

<CR> 


>B 

S=EN 

<CR> 


>B 

S=00 

<CR> 



> SU/U ON <CR> 
>G 100 <CR> 


HELP ! ! ! 

HELP ! ! ! 
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NOTES : 


See the FUNCTION CODE table. 

FUNCTION CODE explanation; 

1) Function Code 00^ 10: 1 CHARACTER INPUT FROM A PORT; 
Input parameter 

Register R7: OOH specifies TERMINAL port. 

1 0H specifies HOST/AUX port. 

End status 

Register A: Input characters. 

The characters input through the specified port are 
stored in register A. If there is no input through the 
port when called, return to the target program is not 
effected until input is given. 

2) Function Code 01, 11: FETCH PORT INPUT STATUS SIGNAL; 
Input parameter 

Register R7: 01 H Specifies TERMINAL port. 

11H Specifies HOST/AUX port. 

End status 

Register A: OOH No input data. 

FFH Input data exists. 

Displays information on the presence or absence of 
input data from the specified port. 

3) Function Code 02, 12: 1 CHARACTER OUTPUT TO PORT; 
Input parameter 

Register R7: 02H Specifies TERMINAL port. 

12H Specifies HOST/AUX port. 

End status 

Register A: Output character. 

A character stored in register A outputs to the speci- 
fied port. If the output of the previous data has not 
been completed when called, return to the target program 
does not occur until the output is completed. 

4) Function Code 03, 13: FETCH PORT OUTPUT STATUS 
SIGNAL; 

Input parameter 

Register R7: OOH Specifies TERMINAL port. 

1 3H Specifies HOST/AUX port. 

End status 

Register A: OOH Output is not completed. 

Displays information on whether the output from the 
specified port has been completed. 
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SUPERVISOR 


FUNCTION 

FUNCTION 

CODE 

DATA OUT 

DATA IN 

R 7 -reg 

A -reg 

TERMINAL Port data in 

0 0 

- 

Rec data 

HOST/AUX Port data in 

1 0 

- 

Rec data 

TERMINAL Port input status read 

0 1 

- 

Input status 

HOST/AUX Port input status read 

1 1 

- 

Input status 

TERMINAL Port data out 

0 2 

Output data 

- 

HOST/AUX Port data out 

1 2 

Output data 

- 

TERMINAL Port output status read 

0 3 

- 

Output status 

HOST/AUX Port output status read 

1 3 

- 

Output status 


Function Code Table 
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TRACE 


^COMMAND: TRACE status 

FUNCTION: Displays the current Trace status. 


SYNTAX: 

>T <cr> j 

COMMAND: 

TRACE designation 


FUNCTION: 

Makes the current trace mode valid (ON) 
or clears (CLR) the trace setting. 

, invalid (OFF) 

SYNTAX : 

>T ON I OFF I CLR <cr> | 

[^COMMAND: 

TRACE specification 


FUNCTION: 

Sets the ICD trace mode. 


SYNTAX: 

>T [/s] A I J beg_addr] [ , end_addr3 < cr > | 

TERMS : 

S : specifies single step mode. In this mode, 

the All or Jump trace is executed each time 
the space bar or return (cr) is pressed. 


A :all commands are traced and displayed. 

J :jump trace (only the branch command is trac- 

ed and displayed) . 

beg_addr :beginning trace address [hex]. 

end_addr :ending trace address [hex/Lbyte] (default=0). 


2-C 
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TRACE 


EXAMPLE; TRACE ALL INSTRUCTIONS. 

This command traces all the instructions of the user 
program and displays register contents after execution 
of the program. To temporarily stop the execution or to 
restart the program, enter <SPACE>. To interrupt the 
program, press the <ESC> key. 


>T A <CR> 
>G 5A <CR> 
PC MC 


05A 

5A 

ANL 

A,R2 

05B 

5B 

ANL 

A,R3 

05C 

5C 

ANL 

A,R4 

OSD 

5D 

ANL 

A,R5 

05B 

5E 

ANL 

A,R6 

05F 

5F 

ANL 

A,R7 

060 

60 

ADD 

A,§R0 


> 


PSW A RO R1 R2 R3 R4 R5 R6 R7 SP 
08 00 55 68 36 02 00 00 00 00 00 


.c .. .. 



.o 55 .. 




^EXAMPLE: TRACE ONLY BRANCH INSTRUCTIONS. 

This command displays the branch instruction and the 
contents of registers when the JUMP trace mode is set 
(>TJ) and the program is executed by the GO command. To 
temporarily stop, restart, and interrupt the program 
execution, use the same procedure as for the trace ALL 
instruction; 


>TJ <CR> 
>G <CR> 


PC 

MC 



PSW 

A 

RO 

R1 

R2 

R3 

R4 

R5 

R6 

R7 

SP 

064 

6465 

JMP 

365H 

08 

BD 

55 

68 

36 

02 

00 

00 

00 

00 

00 

064 

6465 

JMP 

365H 

08 

BD 

66 

68 

45 

00 

00 

02 

00 

00 

00 


> 


!-90 


ICD-178 for 8048 USER’S MANUAL 


2-90 




TRACE 


^EXAMPLE: USE THE SINGLE STEP TRACE MODE. 

This command performs a single step trace each time there 
is a key input from the console. Entering a return (cr) 
causes the program to proceed to the next instruction. 

ESC returns control to the command mode; 


> T/S A <CR> 
>G 4E <CR> 


PC 

MC 



PSW 

A 

RO 

R1 

R2 

R3 

R4 

R5 

R6 

R7 

SP 


04E 

4E 

ORL 

A,R6 

08 

00 

55 

68 

36 

02 

00 

00 

00 

00 

00 

<CR> 

04F 

4F 

ORL 

A,R7 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

<CR> 

050 

50 

ANL 

A,@R0 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

<CR> 

051 

51 

ANL 

A,@R1 

. . 

o . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

. . 

<CR> 

052 

5253 

JB2 

53H 












<ESC> 


(^EXAMPLE: DISPLAY THE CURRENT TRACE STATUS, 

In this example, the current trace mode is the ALL trace, 
and the range of the instructions to be traced is 0 -- 
FFF(H) ; 


> T <CR> 

(ON) ALL 000-FFF 

> 


(^EXAMPLE: CLEAR THE TRACE MODE. 


This command clears the trace mode and the program now 
runs in real-time when the GO command is given; 


> T CLR <CR> 

> T <CR> 

Trace is clear 
> 
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USER 


^ COMMAND: 
FUNCTION: 


SYNTAX: 
TERMS : 

(^EXAMPLE: 


USER 

This command allows the console terminal (connected to 
the ICD TERMINAL port) to be used as the terminal for 
the host system. When this command is entered, the ICD 
does not treat any code, other than the terminator code 
coming through the TERMINAL port, as the ICD command. 
The codes which the ICD receives through the HOST/AUX 
port are all sent to the TERMINAL port. To switch the 
user terminal of the host computer system back to the 
console terminal of the ICD, enter the terminator code. 
This command will work when the ICD is in the LOCAL 
mode only. 


>U code <cr> 


code : terminator code 

Note: <ESC> , <NAK> , <SP > , <BS > and <cr> cannot be used 
as terminator codes. 

USE THE CONSOLE CONNECTED TO THE TERMINAL PORT AS THE 
CONSOLE FOR THE HOST SYSTEM. 


> U l <CR> 
A> XICE <CR> 
> HOST ON <CR> 
ZOS XICE VI. 0 
> 
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VERIFY 


^ COMMAND : VERIFY 


FUNCTION: Compares the object in the Intel format (from the host 
computer file or specified port) with the ICD memory 
contents . 


SYNTAX: 


>V[/T I /P l /A I /H][filename] [, bias] [, message] <cr> 


TERMS : T 

P 

A 

H 


ruse the terminal port (ignore software hand- 
shake ) 

ruse the terminal port (perform software 
handshake) 

ruse, the auxiliary port 
ruse the host port 


filename r object name to compare (valid with ZICE 
software only). 


bias raddress offset to apply to the object file 

being compared [hexdata]. 


message r verify message [ ASCII32/hexdata ] . "message" 
is entered in this form; 'message', 0D 
- where 0D represents a line feed. 


The ICD outputs the verify message to the 
TERMINAL or AUX port prior to verifying 
the object program (Intel format) if the 
/T or /a port is first specified, "filename" 
may be defined for the user defined verify 
message when software handshaking is performed 
and the /P or /H port is specified. 


NOTES: Object File l/O Procedure 


MODE 

REMOTE 

LOCAL 

/T 

X 

X 

/P 

o 

o 

/A 

X 

X 

/H 

o 

o 

Default 

O (HOST) 

X (TERMINAL) 


o - The ICD inputs an Intel format file through 
handshaking. (See Section IV, COMMUNICATION 
PROTOCOL ) . 

X - The ICD inputs Intel format data only and does 

not perform handshaking. The data input ends upon 
receiving an end record (Intel format) or <EXT> 
(Control + C) through a specified port. 
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VERIFY 


(^EXAMPLE: 


(^EXAMPLE: 


NOTE: 


COMPARE THE CONTENTS OF THE MEMORY AND AN INTEL FORMAT 
FILE IN THE HOST SYSTEM. 

When the host system is connected to the HOST/AUX port 
(LOCAL mode) and it supports the protocol at the time 
of ICD verification, this command compares the contents 
of a file from the host system with the contents of the 
memory. In this example, the contents of memory are 
compared with the contents of the file, FILE3.HEX (Intel 
format) in the host system; 


> V/H FILE3.HEX <CR> 
Addr M O 


100 

> 


COMPARE THE CONTENTS OF A FILE (INTEL FORMAT) READ FROM 
ZICE IN THE HOST SYSTEM WITH THE MEMORY CONTENTS. 

In this example, the contents of the host system file, 
FILES. HEX (Intel format) are compared with the memory 
contents ; 


> V FILES. HEX <CR> 
Addr M 0 

100 

> 


*’Adrs'* is the memory address, '*M*' is the memory, and "O*' 
is the object file. 
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ZICE 


[^COMMAND: 

FUNCTION: 

SYNTAX : 
TERMS : 


^EXAMPLE: 


ZICE 

The ZICE command is used exclusively with Zice software. 
ZICE expands the commands not built into the ICD-178. 
When the ICD is used in the remote operation (host com- 
puter) the ZICE utility software is required for con- 
trolling the ICD. 


>Z (Z command & parameter) <cr> 


Z commands include; 

ZB : batch processing. Executes commands of the 

filename. BAT file in the host system by 
batch processing. 

ZC : comment. Inserts a comment in a batch file 

of the host system or in the middle of 
repeat processing and outputs it to the 
console. 

ZD idirectory. Displays a directory of the ^.BAT 

or *.HEX file in the host system by directory 
format . 

ZH :help. Displays command list. 

ZM :menu. Enter data by command menu method. 

ZP :print. Outputs the contents displayed on the 

console screen to a list device. 

ZR : repeat. Repeats a specified command. 

ZW :wait. Places a temporary pause in a repeat 

or batch subcommand. 

OUTPUT THE CONTENTS OF THE CONSOLE DISPLAY ONTO A LIST 

DEVICE; 

In this example, all commands executed after the "ZP ON" 

command and before the "ZP OFF" command, output the re- 
sults to both console and printer; 


> ZPrON <CR> 


> D 0,L30 <CR> 



0 

1 

2 

3 

4 

5 

6 

7 

8 

9 

A 

B 

C 

D 

E 

F 

ASCII CODE 

00 

55 

68 

36 

02 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

Uh6 

10 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 

00 


20 

00 

00 

00 

00 

00 

00 

00 

00 

OO 

00 

00 

00 

00 

00 

00 

00 



>ZP,OFF <CR> 
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SECTION III 

TECHNICAL REFERENCES 


This section contains specific technical information on the 
ICD-178 for 8048 and is intended as a supplement for Sections 
I and II of the USER'S MANUAL. It is not necessary to read 
this section before using the ICD-178, however, you may find 
the information in this section useful if you require a 
detailed analysis on a particular emulator feature. 

3.1 - EMULATION SELECT SWITCH 

This chapter describes the various settings and functions 
of the 4-bit emulation switch. This switch must be set 
correctly for proper emulation. 

3.2 - SERIAL INTERFACE 

This chapter describes the components and functions of 
the SIO S-791 Serial Interface module, including speci- 
fications and switch settings. Included in this chapter 
are pin/signal designations for the TERMINAL and HOST/AUX; 
RS-232C interface, current loop interface, and TTL 
interface. 

3.3 - MEMORY EMULATION 

This chapter describes the ICD emulation memory which is 
used for downloading object files, altering the memory 
contents, etc. This chapter discusses each of the four 
types of memory area; Read/Write, Read Only, User and 
Non (No). 

3.4 - CPU EMULATION 

This chapter contains information on CPU emulation, 
including a detailed analysis of the control signals of 
the 8048 processor, including a discussion on the 
differences between the 8048 microcomputer unit (MCU) 
and the ICD's internal processor. 

3.5 - ROM (EPROM) PROGRAMMER 

This chapter describes the specifications of the EPROM 
programmer and the five types of EPROM processing that 
are available. 

3.6 - REAL-TIME TRACE 

This chapter contains information on the theory and 
operation of the real-time trace buffer, including a 
detailed examination of the six trigger modes that are 
selected by the "HISTORY" command. 

3.7 - PROBES 

This chapter describes the function of the Map Control 
probe and Emulation Qualify probe (both used with the 
External Break cable), and the Event Trigger probe. 
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3.1 — EMULATION SELECT SWITCH 


The Emulation Select switch effects the machine cycle oper- 
ation of the target system, and selects the internal program 
capacity for the corresponding MCU. 


nm 

12 3 4 

1 

' ON -t_mcu type SELCT 

OFF—* (AUTO MAPPING) 

ON (N. C) 

ON ADDRES OUTPUT 


Bit 3, 4 .... setting these bits (see below) effects the 

selection of the Object MCU and corresponding 
ICD internal program memory for the various 
processor families. 


Bit 2 .... not connected. 


Bit 1 .... OFF. This interfaces the ICD to memory devices 

that have slow access times. 

Bit 1 ... ON. This interfaces the ICD to memory devices 

that have normal access times. 
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The ICD classifies the MCUs of the 8048 family into four 
groups according to their internal program memory capacity. 


Bit 3 

Bit 4 

Group 

Target MCU 

Internal program 
memory 

OFF 

OFF 

Group 0 

8535, 8039, 8040 

0KB 

OFF 

ON 

Group 1 

8048, 8748 

1KB 

ON 

OFF 

Group 2 

8049, 8749 

2KB 

ON 

ON 

i 

Group 3 

8050 

4 KB 


During emulation, the ICD control processor checks the status 

of the switches and takes the appropriate action below; 

1) The in-circuit mode 2 (partial), determines the internal 
and external boundary of the program memory space. 

2) When read/write is performed by ROM command, the address 
parameter value is checked for its validity. If the ad- 
dress parameter is missing, the range of read/write is 
determined automatically. 

3) When the status of the IN-CIRCUIT, MAP and ROM command is 
displayed, the Group number is also displayed. 
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3.2 — SERIAL INTERFACE 


3.2.1 INTRODUCTION 

The Serial Interface module (SIO S-791 ) controls communication 
between the ICD-178 and various external devices through the 
TERMINAL and HOST/AUX terminals. This chapter shows the com- 
ponents of the S-791 module and the input/output signals that 
transmit through the TERMINAL and HOST/AUX ports (RS232, TTL 
or Current Loop interface). This chapter also discusses the 
four serial interface control signals which effect various 
terminals and host computer systems. 


3.2.2 SERIAL INTERFACE SPECIFICATIONS 


Interface channels: 
Interface signals: 


Communication mode: 
Transmission format: 


Transmission code: 
Baud rates: 


2 channels, TERMINAL and HOST/AUX 

RS232C (standard) 

20ma Current Loop 
TTL 

(Current Loop and TTL interface 
signals are used by changing the 
jumper sockets JA or JB or the 
line driver IC. ) 

Full-duplex, start/stop 

start bit - 1 

data bits - 7, 8( factory setting) 
stop bit - 1,2(factory setting) 
parity bit- odd, even or no par- 
ity( factory setting) 

(data, stop and parity bits are 
set with the DIP switches DSW3 
and DSW4. ) 

ASCII codes 

19200, 960, 4800, 2400, 2000, 
1800, 1200, 600, 300, 200, 150, 
134.6, 110, 75. 

(Baud rates are set by the Baud 
rate select switch located on 
SIO S-791 module. ) 
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3.2.3 SIO S-791 MODULE COMPONENTS 


socket - the JA socket is used specifically for the 
TERMINAL port. This socket enables the current loop or 
TTL signals depending on the jumper connections (see the 
current loop and TTL interface diagrams). 

socket - the JB socket is used specifically for the 
HOST/AUX port. This socket enables the current loop or 
TTL signals depending on the jumper connections (see the 
current loop and TTL interface diagrams). 

NOTE: When one group of signals are enabled (RS232, TTL or 
current loop) the other two groups are disabled. 

TERMINAL and HOST/AUX line drivers ~ SN75188 is used with 
the RS232 and current loop interface. To use TTL interface, 
replace SN75188 with SN7438 and change the JA3/4/5 and 
JB3/4/5 jumpers. 

^^TERMINAL line driver. 

HOST/AUX line driver. 

^^JA3/4/5 power supply jumpers - used specifically for the 
TERMINAL line driver IC. JA3 and JA5 supply +12V to the 
SN75188. JA4 supplies +5V to SN7438. 

^^JB3/4/5 power supply jumpers - used specifically for the 
HOST/AUX line driver IC. JA3 and JA5 supply +12V to the 
SN75188. JA4 supplies +5V to SN7438. 

^^DSW3 & DSW4 Transmission format switches - these switches 
are used to set data and stop bits for the TERMINAL (DSW3) 
and HOST/AUX (DSW4) ports. 

^DSW3 Transmission format switch (TERMINAL port) 

^DSW4 Transmission format switch (HOST/AUX port) 

^^JCB Console break jumper socket - the JCB socket works 
the same as the MONITOR BREAK switch. (Factory setting 
is ON. ) 
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DCE/DTE 


HOST/AUX 


BAUD RATE 


LOCAL /REMOTE 


TERMINAL 


SIO S-791 Module 








(1) TERMINAL 



12 ' 



SIO S-791 Interface Block Diagram (TERMINAL Port) 
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(2) HOST/AUX 


ji Wkn 



SIO S-791 Interface Block Diagram (HOST/AUX Port) 
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3.2.4 TRANSMISSION FORMAT SWITCHES (DSW3 & DSW4) 


OFF ON 

imD 

2 fm 

3 mn 

4inD 

s din 

s lIIIT 1 
7 fTTn 
s fTTin 


OFF -DATA BIT 8 
OFF-NO PARITY BIT 
OFF-EVEN PARITY 


ON -DATA BIT 7 

ON-ENABLE 

PARITY BIT 

ON-ODD PARITY 


OFF-STOP BIT 2 ON-STOP BIT 1 


OFF -8th BIT ON-8th BIT 

ALWAYS "0” ALWAYS 

(MULTMCD I/F) 


(MULT-ICD I/F) 

^ 1 

OFF-TBMT &. TEOC 


jjc 2 

ON -ONLY TBMT 


Factory settings; 

TERMINAL - 8 data bits HOST/AUX - 8 data bits 

2 stop bits 2 stop bits 

no parity bit no parity bit 

Bit 8=0 Bit 8=0 

NOTE 1 : Setting bit 8 to OFF causes the ICD to transmit on a 
single buffer basis for monitoring the BUSY state. Setting 
bit 8 to ON causes the ICD to transmit on a double buffer 
basis without monitoring the BUSY state. 

NOTE 2: Signals for multiple ICD use can input /output through 
the HOST/AUX port by setting the DSW3 (bit 6 - ON) and DSW4 
(bit 6 & 7 - ON) switches. ( Input /Output level is EIA.) The 
factory setting for MULTI-ICD I/O is OFF. 

NOTE 3: TBMT and TEOC signals; 

* TBMT - Transmitted Buffer Empty. The transmitted buffer 

empty flag goes to a logic ” when the data bits 
holding register may be loaded with another char- 
acter . 

* TEOC - Transmitted End of Character. This line goes to a 

logic "1" each time a full character is transmit- 
ted. It remains at this level until the start of 
transmission of the next character. 
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3.2.5 RS-232C INTERFACE 


Pin 

NO. 

Signal 

NAME 

Mean i ng 

I n/Out 

JA No. 

1 

FG 

FRAME GROUND 


*3 

2 

SD 

SEND DATA 

IN 

SN 751 88N '^ 

3 

RD 

RECEIVE DATA 

OUT 


4 

RTS 

REQUEST 

IN* 1 


5 

CTS 

CLEAR TO SEND 

OUT*1 


6 

DSR 

DATA SEND READY 

OUT 

J6,J20#2 

20 

DTR 

DATA TERMINAL READY 

IN 

J6,J20 

7 

SG 

SIGNAL GROUND 




RS-232C Interface (TERMINAL Port) Signals 


*1 CTS and RTS are looped back (null modem) within the ICD 
and pulled up to +5V. 

^2 DTR and DSR are looped back (null modem) within the ICD 
by connecting JAG and 20 (pins 15 & 16) together. DTR is 
used as the BUSY signal for an ICD terminal by connecting 
JA20. DSR may be used as the BUSY signal by connecting 
JB6. 

When JAG is connected, the loopback jumper between JAG 
and 20 (pins 15 & 16) is prohibited. The standard con- 
nection = JA6/20 and JA20. 

^^3 SN751 88N is installed for the TERMINAL line driver. In 

this configuration, JB3 and JB5 are connected with a 
jumper plug to supply ±1 2V to SN75188N. JA4 may NOT be 
connected. The standard connection = JB3 and JB5. 
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Pin 

NO, 

Signal 

NAME 

Meaning 

In/Out 

JA No. 

1 

FG 

FRAME GROUND 



#4 

2 

SD 

SEND DATA 

out( in) . 


SN 75188N 

3 

RD 

RECEIVE DATA 

in(out) 



4 

RTS^O 

REQUEST TO SEND 

out( in) 



5 

CTS 

CLEAR TO SEND 

in(out) 


J6,20*^ 

6 

DSR 

DATA SEND READY 

in(out) 


20 

DTR 

DATA TERMINAL READY 

out( in) 


J6,20 

7 

SG 

SIGNAL GROUND 





RS-232C Interface (HOST/AUX Port ) Signals 


*1 Values in ( ) are assumed when the DCE/DTE select switch 
is set to DCE. 

*2 CTS and RTS are looped back (null modem) within the ICD 
by connecting JB6 and 20 (pins 15 & 16) together. 

*3 DTR and DSR are looped back- (null modem) within the ICD 
by connecting JB6 and 20 (pins 15 & 16) together. 

DTR is used as the BUSY signal for the ICD terminal by 
connecting JB20. DSR may also be used as the BUSY signal 
for the ICD terminal by connecting JB6. When JB6 is 
connected, the loopback jumper between JB6 and 20 (pins 
15 & 16) is prohibited. Standard connection = JB6/20 and 
JB20. 

*4 SN75188N is installed for the HOST/AUX line driver. In 

this configuration, JB3 and JB5 are connected with a 
jumper plug to supply ±12V to SN75188N. JB4 may NOT be 
connected. Standard connection = JB3 and JB5. 
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RS-232C Interface Jumper Settings 
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3.2.6 CURRENT LOOP INTERFACE 


Pin 

Signal 





NO. 

NAME 

Mean i ng 

In/Out 

JA No. 

24 

L0UT + 

CURRENT LOOP 0UT(+) 

IN 

J24 

25 

LOUT- 

CURRENT LOOP OUt(-) 

J25 

17 

LIN + 

CURRENT LOOP In(+) 

OUT *2 

J17 ^ 

J18/220*^ 

18 

LIN- 

CURRENT LOOP IN(-) 

OUT 

15 

R$TP + 

READER STEP(+) 

OUT *2 

J15 

16 

RSTP- 

READER STEP(-) 

i 

OUT 

J16 *4 


Current Loop Interface (TERMINAL and HOST/AUX Ports) Signals 


*1 Current source pin used for current loop input signals, 
■-12V pull-down. 

*2 Current source pin used for current loop input signals, 
+12V pull-up. 

*3 Jumpers JA and JB1 8 are connected with a current limit- 
ing resistance of 220 ohms-1/4W -or- the resistance is 
altered to suit the associated circuit. 

*4 Jumpers JA and JB1 8 are connected with a current limit- 
ing resistance of 47 ohms-1/4W. 

With a current loop interface, the HOST/AUX port is 
used only at the DCE setting (DCE/DTE select switch). 

The baud rates over the current loop interface must NOT 
exceed 600bps. 
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3.2.7 TTL INTERFACE 


Pin 

NO. 

Signal 

NAME 

Mean i ng 

1 n/Out 

JA No. 

1 

FG 

FRAME GROUND 


SN 7438*^ 

2 

SD 

SEND DATA 

IN 

3 

RD 

RECEIVE DATA 

OUT 


19 

BUSY 

BUSY INPUT 

IN 

J13, 6*^ 

13 

BUSYOUT 

. BUSY OUTPUT 

OUT 

16 

7 

RSTP 

SG 

READER STEP 

SIGNAL GROUND 

OUT 

J16 


TTL Interface (TERMINAL Port) Signals 


The BUSYOUT signal becomes a TTL level signal when JA6 
and JA1 3 (pins 8 & 9) are joined together and then 
connected to JA13. 

^2 The Terminal line driver contains an SN7438N. JA4 is 
connected with a jumper plug to supply +5V to SN7438N. 
JA3 and 5 must NOT be jumped. 

CAUTION: JA20 MAY NOT BE CONNECTED WHERE JA1 9 IS CON- 
NECTED. 
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Pin 

NO. 

Signal 

NAME 

Meaning 

1 n/Out 

JA No. 

1 

FG 

FRAME GROUND 



2 

SO 

SEND DATA 

out( in)T 

SN 7438*3 

3 

RD 

RECEIVE DATA 

in(out)J 


19 

BUSY 

BUSY INPUT 

IN 

J19 

13 

BUSYOUT 

BUSY OUTPUT 

OUT 

J13, 6*2 

16 

RSTP 

READER STEP 

OUT 

J16 

7 

SG 

SIGNAL GROUND 




TTL Interface (HOST/AUX Port) Signals 


*1 When the DCE/DTE switch is set to DCE, signals are rout- 
ed in the directions indicated in ( ) . 

*2 The BUSYOUT signal becomes a TTL signal when JB6 and JB 
13 (pins 8 & 9) are connected, then outputs to the pin 
when JB1 3 is connected. 

*3 The HOST/AUX line driver contains SN7438N. JB4 is 

connected with a jumper plug to supply +5V to SN7438N. 
JB3 and 5 must NOT be connected together. 

CAUTION: JB20 MAY NOT BE CONNECTED WHERE JB1 9 IS CON- 
NECTED. 
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TTL Interface Jumper Settings 
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3.2.8 SERIAL INTERFACE CONTROL SIGNALS 


The Serial Interface control signals effect the transmission 
between the ICD and various external communication devices. 
These signals include; XON/XOFF, BUSY, DTK, BUSYOUT, DSR, and 
RSTP. 

XON and XOFF protocol 

When the host computer or terminal cannot receive data sent 
from the ICD due to the ICD's high baud rate, the data output 
can be controlled with XON and XOFF. 

XOFF ... DC3 (CTR-S: 13H) 

XON ... DC1 (CTR-Q: 11 H) 

The host computer or terminal sends XOFF to the ICD before the 
reception buffer overruns. After XOFF is sent, the host compu- 
ter or terminal sends XON to the ICD if the reception buffer 
is ready. The ICD then resumes data transmission after receiv- 
ing XON. 

BUSY and DTR (input signals) 



The ICD can stop data transmission if a BUSY signal is detected 
from a low-speed terminal. Normally, the terminal sets the 
BUSY signal low, from the leading edge of the receive data 
signal (RD) starting bit to the completion of data processing. 
The ICD suspends its data transmission to the terminal as long 
as the BUSY signal is low. 
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BUSYOUT and DSR (output signals) 



When the host computer system sends data at a higher speed 
than the internal ICD monitor processor can accept, the BUSYOUT 
signal of the ICD must be monitored. The ICD sets the BUSYOUT 
signal to low until the ICD monitor reads transmitted data (SD) 
from the host system. During this time, the host computer 
waits for data transmission to the ICD. 

RSTP (output signal) 



The ICD can transmit the RSTP signal to terminals that require 
a step signal for each data transmission. The ICD sets RSTP 
to low when data reading is requested. It then returns RSTP 
to high upon detection of the start bit signal from the ter- 
minal transmitted data. 
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3.3 MEMORY EMULATION 
3.3.1 ICD EMULATION MEMORY 

The ICD incorporates 4K-bYtes of high-speed RAM which is 
called ICD program (emulation) memory. This memory can be 
used for downloading object files, altering the memory con- 
tents and as a read/write buffer for the ROM (EPROM) pro- 
grammer. The ICD also contains "External Data Memory" (XDM) 
which allows programs to be executed without the ICD being 
connected to a target system. 



ICD Target System 


ICD/Target System Memory Interface Diagram 
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3.3.2 MEMORY MAPPING 


When you are performing emulation in the II mode, it is pos- 
sible to use the target system memory (mapped in units of 256 
bytes) or ICD emulation memory. These conditions are set by 
the "map” command. There are four types of memory blocks to 
choose from? READ/WRITE, READ ONLY, USER (TARGET) and NON 
( NO MEMORY ) . 

READ/WRITE: This specification is valid for the External 

Data Memory (XDM) only. (You cannot use it with 
the ICD emulation memory. ) Memory blocks having 
this specification can be accessed by read or 
write. 

READ ONLY: This specification uses the ICD internal emula- 
tor memory in place of the target system’s memory. 
You cannot write into this memory area during 
emulation, however, it can be used as if it were 
ROM. 

USER: This specification uses the memory mounted in 

the target system. 

NON: This specification is for a memory area mapped 

as "non-existent.” This means a place in the ICD 
where no memory resides. If the target program 
accesses this memory area during emulation, a 
break in the program will occur. 
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] Resident 
I Data 



Emulation MCU Target System 

Logical Memory Location 


ICD/Target System Memory Mapping Diagram 
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3.4 CPU EMULATION 

3.4.1 ICD/TARGET SYSTEM INTERFACE 




3.4.2 MCU/ICD DEVIATIONS 


The ICD-178 will not always perform the same actions as the 

Microcomputer Unit (MCU) . It is important to note; 

1 ) Internal data memory 

The standard MCU mounted in the ICD is 8040. This chip 

has 256 bytes of internal data memory. 

2) AC/DC characteristics 

A - Propagation delay caused by TTL buffer. Not all signal 
lines are connected directly to the MCU and the tar- 
get system. The TTL buffer is usually placed between 
the two. This causes the load current, drive current 
and rise/fall time to be different - causing a pro- 
pagation delay in certain instances. 

B - The BUS port and Port 2 are simulated within the ICD 
to generate their functions. This causes the output 
timing to differ between the MCU and ICD. The output 
status of the BUS port and Port 2 also differs depend- 
ing on the Emulation Select switch setting. 

C - Clock oscillator circuit. When the target system clock 
runs at the TTL level, proper emulation is assured. If 
the clock is supplied with an X'tal or RC circuit how- 
ever, normal output is not guaranteed. Therefore, you 
may have to build the proper clock simulator board 
and connect it to the "CLKS” connector on the ICD. 

3) ALE output during MONITOR operation. 

During MONITOR operation, the ALE output varies (H and L) 

and should not be used for a clock output. 
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MCU/ICD Timing Deviations 
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a) Read timing of program memory in target system 




MCU/ICD Timing Deviations 
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d) Read/write timing of ICD internal emulation 

(including program memory and external data memory) 

ALE j 1 r 

PSEN, RD, WR “H” 

P20-23,BUS ' 


Fig. 5-2 When E.M.SEL.1 = ”0N’' (as shipped) 

e) Read timing of program memory in target system 

ALE _| I ^ T 


PSEN 

P20.23 nW l A8-11 I1P20-23M^ 

BUS □sqEDB — — Cr^ — t 

f) Read timing of ICD internal emulation memory (program 
memory) 


ALE _J [ 


PSEN 


“H” 

P20-23 

nidi A8-11 

)(P20-23) 


BUS ~ i AO-7 h - ^ [ 


MCU/ICD Timing Deviations 


3-88 


ICD-178 for 8048 USER'S MANUAL 


3-28 




P20-23 Simulation Circuit 
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3.43 CLOCK SELECTION 


The CLOCK switch specifies the use of either the; 

1) ICD internal clock ( 1 OMHz TTL level input) [INT], 

2) External (target) clock (TTL level input) [EXT]. 

3) Crystal/RC circuit CLKS board emulation. 


' CLOCK " 


INT EXT 



ICD/Target System Clock Configuration 
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CLKS DIP PLUG ASSIGNMENT 


PIN 

No. 

SIGNAL 

NAME 

MEANING i 

IN/OUT 

1 

SIN 

TTL clock input terminal *1 

IN 

2-11 

GND 

Ground 

— 

15-22 

GND 

Ground 

— 

12 

3 ™ 

TTL clock XIN inverted input terminal *1 

IN 

13, 14 

X2 

XTAL2 of MCU Input 

OUT 

23, 24 

XI 

XTALl of MCU Input 

OUT 


ICD Internal Clock 

The ICD internal clock runs at a frequency of 10 MHz with a 
50% duty cycle. This is the setting from the factory. You 
can change this clock speed to 2.5 MHz or 5 MHz by using the 
ICD internal jumper located on the S-792 board. 


cx 


■^10 
O 5 
0 2.5 


CX 




O 2.5 


CX 


O 10 
\0 5 

2.5 


1 OMHz 


5MHz 


2.5MHz 


Target System External Clock 

If you are using a crystal or RC oscillator circuit to drive 
the external clock, you must fabricate an equivalent circuit 
on the SCI DIP plug. 


CLOCK=EXT 

CLKS 

i)’2T‘lXi 
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Target System Clock Configurations 
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3.4.4 RESET Signal 


The RESET switch located on the ICD Operator Panel resets the 
ICD, including the internal emulation Microcomputer Unit (MCU). 
The MCU will also accept a RESET input from the target system 
during emulation, however during MONITOR operation, this RESET 
to the MCU is ignored. To reset the MCU during MONITOR operation 
use the "REGISTER'* RESET command. This command also initializes 
the contents of all registers. 

The RESET input from the target system may be enabled/disabled 
when emulation is performed in the In-circuit 1 mode. 
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3.4.5 MONITOR (Interrupt Signal) 


The MONITOR switch returns control to the ICD monitor during 
emulation. When the MONITOR light is on, external interrupts 
( INT input) and timer/counter interrupts are prohibited. Al- 
though the operation of the tiraer/counter continues, caution 
should be exercised when it is used as a timer because the 
count rate is decreased. 


MONITOR 



ICD TARGET SYSTEM 


MONITOR Circuit Block Diagram 



Incircuit 

Mode 0 

Mode 1 

Mode 2 


Monitor 

Emulatio 

Monitor 

Emulation 

Monitor 

Emulation 

RESET 

X „ 

X 

X 

A 

X ,, 

O 

INT 

X 

X 

X 

A 

X 

o 


X 

X 

A 

A 

O 

o 

EA 

X 

X 

A 

A 

O 

o 


O : Effective 
X : Ineffective 

A : Normally may be masked by 
Pin command. 

*1 . . Use Register RESET command 
instead . 
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3.5 ROM (EPROM) PROGRAMMER 


3.5.1 SPECIFICATIONS 


Associated processor: EP-ROM processor 


i8748/48H 

. . . IK 

bytes 

i8749/49H 

. . . 2K 

bytes 

MASK~R0M processor 



i8048/48AH 

. . . IK 

bytes 

i8049/49AH 

. . . 2K 

bytes 

iSOSOAH 

. . . 4K 

bytes 


Programming capacity: 4K bytes, maximum 

ROM processor selection: ROM module is changed according to 

ROM processor. 


Operating method: Refer to ROM command in the Command 

Reference Guide. 


Programming voltage: 


ROM Select 
Module 

ROM Processor 

VDD 

EA 

— 

PROG 

Unit 

i87x X 

i 8748/49 

25 

23 

23 

Volt 

i87x xH 

i8748H/49H 

. . 

21 

18 

18 

Volt 

i80x X 

18048/49/50 

5 

12 

- 

Volt 

i80x X H 

i8048H/49H/50H 

5 

12 

- 

Volt 


NOTE ; PROG— = Floating 


NOTE: USE THE PROPER ROM MODULE WITH THE CORRESPONDING ROM 
PROCESSOR. ROM MODULE/PROCESSOR MISMATCH MAY DAMAGE THE 
PROCESSOR. 
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3.5.2 ROM PROGRAMMING 


ICO 178 fori 48 TARGET SYSTEM 

I 

EP ROM/ROM MCU 

ROM PROGRAMMER PROGRAM MEMORY (PROGRAM MEMORY) 



The ROM command is >RO E R W V P address 1, address 2 <cr>. 

The parameters for this command are? 

E (erase) - EPROM processor erase status is checked. 

R (read) - The program memory content of the EPROM/ROM pro- 
cessor is read into the ICD program memory (with 
a read-after-check). 

W (write) - The ICD program memory content is read into the 
program memory of the EPROM/ROM processor (with 
a read-after-check) . 

V (verify) - The program memory content of the EPROM/ROM pro- 
cessor is verified by the contents of the ICD 
program memory. 

P (program) - The parameters E, W and V are performed by this 
program command. 
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3.6 REAL-TIME TRACE 


3.6.1 REAL-TIME TRACE SPECIFICATIONS 


Word width 32 bits 

Word size 2K 


Acquisition cycle 
Trace section 

Fixed trace data 


Trigger Mode 
Display 


CPU machine cycle (150ns min) 

2046 machine cycles 
(2.78ms min./10MHz) 

AO-1 1 , DO-7 
PROGRAM MEMORY 
DATA MEMORY 
RD/WR/PORT 

The start and end of tracing are 
specified by the "HISTORY” command. 

Machine cycle or disassembled 
display. 


Real-time Counter Specifications 


Count bit width 
Count clock 
Effective count time 


32 bits 
ALE clock 
5841 seconds 
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3.6.2 REAL-TIME TRACE ACQUISITION 


The storing of the data occurs on the leading edge of the 
RD/WR/PSEN signals during real-time tracing. The ICD ensures 
positive storing of the address, status and data when using 
the ICD program or user memory. However, storage of user 
memory or user I/O read is not guaranteed unless the data 
setup time is longer than 65 ns. 


RD 


_2!_ \ 

WR \ 

/ 

t — 

U1 ^ ' ■ 

PSEN 

(MCYCLE) 

‘su^ 

JH 

V— 



N — / 




tSU 

Real Time Trace User Data Read set up time 

min 65 ns 

tH 

Real Time Trace User Data Read hold time 

minO ns 
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3.6.3 REAL-TIME TRACING - THEORY OF OPERATION 
INTRODUCTION 


The real-time trace records a portion of the program mem- 
ory area. During emulation, a specified section of the 
program memory contents is recorded ("captured") and stored 
in the real-time trace buffer. This specific trace section 
can then be dumped and displayed. If there is a problem with 
the user program, a record of the program execution (history) 
can be reviewed. 


DESCRIPTION 
Real-time Trace Buffer 

The real-time trace buffer can be thought of as a data 
storage facility (consisting of word width and word size) 
that moves along parallel to the user program. The buffer 
stores the same data that is being executed by the program. 
When the buffer becomes filled with data and the tracing 
operation is to continue, the real-time trace will begin to 
"write over" the previous data it has stored. The buffer 
will always display the latest data stored in it. 


Program 

Memory 

Area 


Program - 


- Execution 


Real-time 
Trace #- 
Buffer 


I I I 


DATA 


I 


buffer t 


0 ^ 


0 
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Trigger Modes 


The ICD is equipped with a powerful real-time trace unit 
that features six different trigger modes. These modes act 
as "trigger points" and determine where (and when) the trace 
section is recorded in relation to the user program. The six 
trigger modes include; Begin Monitor (BM), End Monitor (EM), 
Begin Event (BE), Center Event (CE), End Event (EE) and 
Multiple Event (ME). These names designate which points in 
the user program will trigger the real-time trace (Event 
points. Break points, pushing the MONITOR switch, beginning 
the program with the "GO" command). 

These modes are specified by the "HISTORY" command (see 
Section 2 - COMMAND REFERENCE GUIDE). 





Trace Section Size 


The trace section size is determined by specifying the 
"range" in the "HISTORY" command. This range extends back- 
wards/forwards (or both), from one of the six trigger modes. 
When the range is not specified, the ICD assumes the default 
(maximum) condition. The range specification can be found 
under "Real-time Trace Specifications." 


“Captured” Trace Data 


The real-time trace buffer is used to record and display a 
specific section of the user program. This specific section 
is referred to as the "captured" trace section. It is this 
portion of the user program that will be displayed to you. 
The captured trace section always contains the latest 
data from the program. 
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Simplest Case: Begin Monitor Mode 


An easy way to understand how the real-time trace works, 
is to examine the Begin Monitor mode. In this mode, the 
"GO" command (which begins emulation), also triggers 
the start of real-time trace storing. The same 
data that is executed from the program memory area is 
transferred to the real-time trace buffer and stored. 

After the user program executes (and the buffer stores) the 
data equivalent of the range, the trace buffer is considered 
full and the storing ends. The data that is now stored 
in the buffer is captured trace data. The real-time trace 
then enters a non-trace mode and stops when a MONITOR break 
(accomplished by pushing the MONITOR switch) or breakpoint 
is encountered. 
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Begin Event Mode 


The Begin Event mode works in the same way as the Begin 
Monitor mode except that an event point triggers the real- 
time trace instead of the "GO" command* The buffer stores 
the amount specified by the range and then stops* The data 
now stored in the buffer is captured trace data* 
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End Monitor Mode 


The End Monitor mode begins storing all data and then 
terminates the storage process when a breakpoint is encount- 
ered, or when the MONITOR switch is pressed. The captured 
trace section is then found by subtracting the range from 
the break or MONITOR point. 

For the ICD to accomplish this type of trace, it must begin 
recording data in the real-time trace buffer at the start 
of emulation, (even though the desired trace section might 
be toward the end of the user program). 

The ICD performs this type of trace by using a "snapshot'* 
recording technique and then by "writing over" the data 
previously captured by the snapshot (see Real-time Trace 
Buffer diagram). 

The End, Center and Multiple Event modes use this same snap- 
shot and over-writing technique in their operation. 
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End Event Mode 


The End Event mode works in the same way as the End Monitor 
except that an event point (instead of a breakpoint) 
triggers the buffer to stop storing data. The captured 
trace section is then found by subtracting the range 
from the event point. - 



not 

tracing 



tracing 

memory 



“captured” 

trace 
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Center Event Mode 


The Center Event mode is used when there is a single event 
point in the user program. The Center Event mode takes the 
range specification and "splits" it on either side of the 
event point. For example, if 2K is specified as the range, 
1K of data would be captured before the event point and 
1K would be captured after the event point. 

Just like the End Monitor and End Event mode, the Center 
Event mode sets the real-time trace to begin recording data 
immediately after the "GO" command. 





not 

tracing 




“captured” 

trace 
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Multiple Event Mode 


The Multiple Event mode is used when there are multiple 
event points in the user program. The Multiple Event mode 
takes the range specification and divides it by the total 
number of event points in the user program. The quotient is 
then equal to the size of each trace section. Each captured 
trace section initiates from each one of the event points. 

For example, if 2K is specified as the range and there are 
four event points set in the program, the size of each 
captured trace section would be; 

2K = 2(1024); 2048/4 = 512 



evt.pti evt.pt 2 evt.pt“n” 



e e 


not 

tracing 



“captured” 

trace 


The following pages show the six trace modes available with 
the real-time trace. An example is included with each trace 
mode. There is also a short program included so that you 
can see how the real-time trace works. The program can be 
used with each trace mode. 
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TRACE MODE: End Monitor 


COMMAND: >H EM <cr> 


RANGE: 2K 


Program 

Memory PROGRAM - 
Area 


EM ’QQ 


Real-time 
Trace x 
Buffer „ 


EXAMPLE: End Monitor (This is the default condition after the ICD is 
turned ON and the RESET switch is pressed). 

NOTE: For simplicity, all locations from 0 to 7FF are filled 

with NOP instructions. 


NOP Instructions 

>10 (default condition) 

>F P: 0 , 7FF , 0 

>B/A 0F,7FF 
>G 0 


; fills program memory from 
location 0 to 7FF with NOPs. 
;sets a hardware breakpoint. 

; starts emulation and initi- 
ates real-time History buffer 
storage . 


PC MC 

OP PSW 

A 

R0 

R1 

770 00 

NOP 0A 

02 

00 

00 

<Break 

> 

Hardware 

A> 



>HD 

POINT 

T ADDR 

DT 

ST 

OP 

1921 

000 

00 


NOP 

1920 

001 

00 


NOP 

§ 





0003 

7FE 

00 


NOP 

0002 

7FF 

00 


NOP 

0001 

* PAUSE 





00 00 


00 02 


;program reaches break point 
and breaks. 

;displays History contents in 
numeric code. 


* indicates trigger point. 

§ real-time storage pointer 
range 1906 to 0001 
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TRACE MODE: Begin Monitor COMMAND: >H BM <cr> 


RANGE: 800 


200 300 400 500 600 700 800 2K^ 


» Hardware Breakpoint 


Program 

Memory PROGRAM - 


BM GO 


Real-time . 
Trace ' 
Buffer , 


( “captured” 
trace 


EXAMPLE: Begin Monitor 
NOTE: This example 


This example uses the same program as the Event Monitor 
mode program (only the Begin Monitor specification changes). 


>H CLR 
>H BM 


>B/A 0F,7FF 
>G 0 


PC MC OP PSW A 
7FF 00 NOP 08 00 

< Break Hardware A> 

> 

>HD 


; resets History command. 

;sets the real-time storage 
to Begin Monitor mode. 

; starts emulation and initi- 
ates real-time trace buffer 
storage. 

; emulation stops when program 
reaches a breakpoint. 

R0 R1 R2 R3 R4 R5 R6 R7 SP 

00 00 00 00 00 00 00 00 00 


jdisplays History contents in 


POINT 

T ADDR 

DT 

ST OP 

numeric code, 

0802 

* 0000 

00 

NOP 

address 1 . 

0801 

0001 

00 

NOP 


0002 

0001 

7FF 

PAUSE 

00 

NOP 



^indicates trigger point. 
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TRACE MODE: Begin Event 


COMMAND: >H BE <cr> 


RANGE: 2K 



EXAMPLE: Begin Event 

; fills program memory from 
location 000 to FFFF 
with NOP instructions. 

r 

;sets Begin Event real-time 
trace storage mode. 

;sets event point. 

;sets hardware breakpoint to 
terminate emulation, 
starts emulation from location 
000 . 


PC MC 

OP PSW 

A 

R0 

R1 

R2 R3 R4 R5 R6 SP 

077F 00 

NOP 08 

00 

00 

00 

00 00 00 00 00 00 

<Break 

Hardware 

A> 




> 





;program reaches hardware break 






A and stops. 

>HD 





;displays History contents in 

POINT 

T ADDR 

DT 

ST 

OP 

mnemonic code. 

1 1 21 

* 0320 

00 


NOP 


1120 

0321 

00 


NOP 

;this default condition will dis 






assemble from beginning of the 

0002 

077F 

00 


NOP 

storage pointer. 

0001 

PAUSE 






*indicates the Event point. 


>F P:0,7FF,00 

>H CLR 
>H BE 

>EV ST=OF,A=0320 
>B/A OF,77F 

>G 0 
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TRACE MODE: Center Event 


COMMAND: >H CE <cr> 


RANGE: 500 




not 

tracing 


EXAMPLE: Center Event 


>H CLR 
>B INI 
>H CE 500 

>EV ST=OF,A=3FF 
>G 0 

>B/A OF,7FF 


>HD 



tracing 

memory 



“captured” 

trace 


; continues from Begin Event 
example. Use same program 
and hardware breakpoint, 
presets History command. 

;resets event trigger. 

;sets Center Event real-time 
trace storage mode. 

?sets event point. 

; starts emulation from, location 

000 . 

;program will reach hardware 
breakpoint A and stop. Screen 
will display same data as 
Begin Event example. 

^displays the contents of 
History buffer in mnemonic 
codes . 


POINT T ADDR DT ST OP 

1525 000 00 NOP 

1524 001 00 NOP ;see Begin Event example. 

0502 * 3FF 00 NOP 

0501 400 00 NOP 

0002 5F3 00 NOP 

0001 PAUSE 

^indicates event point. 
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TRACE MODE: End Event 


COMMAND: >H EE <cr> 


RANGE: 2K 



; continues from Center Event 
example. Use same program and 
hardware breakpoint. 

; resets History command. 

; resets event trigger. 

;sets End Event real-time 
trace storage mode. 

;sets event point. 

/ 

; starts emulation. 

;program will reach hardware 
breakpoint A and stop. Screen 
will display same data as 
Begin Event example. 

>HD jdisplays the contents of 

History buffer in mnemonic 
codes . 

POINT T ADDR DT ST OP 

1027 000 00 NOP 

1026 001 00 NOP ;see Begin Event example. 

0005 3FE 00 NOP 

0004 ^ 3FF 00 NOP 

0003 400 00 NOP 

0002 401 00 NOP 

0001 PAUSE 

^indicates event point. 


EXAMPLE: End Event 


>F P:0,7FF,0 
>H CLR 
>B INI 
>H EE 

>EV ST=0F,A=3FF 
>B/A 0F,7FF 
>G 0 
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TRACE MODE: Multiple Event 


COMMAND: >H ME <cr> 


RANGE: 100 


0 200 300 400 500600 700 800 

1 KH — — I — t- 

Memory PROGRAM 

Area 

H 1 1 hH — I — H- 

ME >G0 


Real-time 

Trace 

Buffer 


'Hardware Breakpoint 


V “captured” 
/ trace 


EXAMPLE: Multiple Event 


>F P:0,7FF,0 
>A 7FE 

7FE JMP 0H 
>B/A OF,7FE,10 


>H CLR 
>B INI 
>H ME,1 00 
>EV ST=OF A=0C8 


; continues from End Event 
example. Use same program and 
hardware breakpoint. A JUMP 
instruction is added at 
location 7FE so that the 
program will loop during 
execution. (100 passing 
counts are also added 
to the breakpoint). 

presets History command, 
jresets event trigger. 

;sets Multiple Event real-time 
trace storage mode and storage 
size as 100 instructions per 
loop. 

j starts emulation. 

;displays the contents of 
History buffer in mnemonic 
codes . 


POINT 

T 

ADDR 

DT 

ST OP 

1020 

* 

0C8 

00 

NOP 

1 01 9 


0C9 

00 

NOP 

918 

★ 

0C8 

00 

NOP 

917 


0C9 



103 


PAUSE 



102 

* 

0C8 


NOP 

101 


0C7 


NOP 


;see Begin Event example. 


^indicates event point. 
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3.7 PROBES 

3.7.1 EVENT TRIGGER PROBE 


The Event Trigger probe is used to receive a low-level pulse 
(TTL) signal when an event point is passed during emulation. 
The duration of this low-level pulse is 250ns from the moment 
at which the RD/WR rises in a cycle with matching event con- 
ditions, and the moment at which the RD/WR signal in the next 
cycle rises. A low-level pulse synchronized with the RD/WR 
signal outputs if "don't care" is specified as an event con- 
dition. 




Event Trigger Timing Diagram 
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3.7.2 MAP CONTROL PROBE 


The Map Control probe allows the target memory to be used over 
the entire memory area ( 4K bytes + 256 bytes) regardless of the 
map specification. The Map Control probe of the External Break 
cable must receive the TTL signal and the in-circuit mode must 
be either 1 or 2 for the probe to operate correctly. 

This input signal is similar to the EA input signal of the MCU 
chip, however it is different than that of the EDM (External 
Data Memory). This input signal is ignored when the MONITOR 
lamp is ON. 



I CD 


Map Control Timing Diagram 
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3.7.3 EMULATION QUALIFY PROBE 


The Emulation Qualify probe indicates the status of the ICD 
emulating the target system. The Emulation Qualify output is 
at a high level (TTL) until control returns to the ICD mon- 
itor. Unwanted signals can be removed by connecting the probe 
to a logic analyzer or similar device. 



Emulation Qualify Timing Diagram 
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